OroCRM
86%
Total Score
healthy
Healthy: recent releases and active repository maintenance support dependable adoption.
The repository has 58 open issues, but no issues or pull requests were opened, closed, or merged in the last month; this is a modest maintenance concern, although commit activity remains active.
Composer is used for builds, but no security-scanning tools were detected; the repository's security policy partly compensates by providing a defined reporting path.
| Title | Versions | Severity |
|---|---|---|
CVE-2021-39198 oro/crm is vulnerable to Cross-Site Request Forgery (CSRF) in versions 3.1.0 - 4.1.17 and 4.2.0 - 4.2.7. | 3.1.0 - 4.1.174.2.0 - 4.2.7 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
oro/platform Version 7.0.* | — | — |
oro/marketing Version 7.0.* | — | — |
oro/calendar-bundle Version 7.0.* | — | — |
oro/crm-call-bundle Version 7.0.* | — | — |
oro/crm-task-bundle Version 7.0.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.