pimcore/admin-ui-classic-bundle
15%
Total Score
100
71
100
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement provided. This is a severe adoption risk because future fixes and support are not expected.
The linked repository is archived even though it was pushed recently, so normal ongoing maintenance is no longer expected. This outweighs the recent activity elsewhere in the assessment.
All 8 workflows were analyzed with no reported audit findings or untrusted checkouts, but all 13 analyzed action references are unpinned and one workflow has top-level write permissions. The result is a contained workflow-hygiene concern, not a severe risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-44741 pimcore/admin-ui-classic-bundle is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 2.0.0-RC1 - 2.3.5 and 0.0.0 - 1.7.18. | 0.0.0 - 1.7.182.0.0-RC1 - 2.3.5 | High |
CVE-2026-23495 pimcore/admin-ui-classic-bundle is vulnerable to Improper Access Control in versions 2.0.0-RC1 - 2.2.2 and 0.0.0 - 1.7.15. | 0.0.0 - 1.7.152.0.0-RC1 - 2.2.2 | Medium |
AIKIDO-2025-10427 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. pimcore/admin-ui-classic-bundle is vulnerable to Cross-Site Scripting (XSS) in versions 2.0.0 - 2.0.2. | 2.0.0 - 2.0.2 | High |
CVE-2025-30166 pimcore/admin-ui-classic-bundle is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.7.6. | 0.0.0 - 1.7.6 | Low |
CVE-2025-24980 pimcore/admin-ui-classic-bundle is vulnerable to Observable Response Discrepancy in versions 0.0.0 - 1.7.4. | 0.0.0 - 1.7.4 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nesbot/carbon Version ^3.8.4 | — | — |
endroid/qr-code Version ^6.0.1 | — | — |
pimcore/pimcore Version ^12.3.12 | — | — |
cbschuld/browser.php Version ^1.9.6 | — | — |
phpoffice/phpspreadsheet Version ^2.2 || ^3.3 | — | — |
Weekly Downloads
Info
- Last Published
- 2 months ago
- Created
- 3 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.