Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/doctrine/orm@2.0.0
purl pkg:composer/doctrine/orm@2.0.0
Next non-vulnerable version 2.1.3
Latest non-vulnerable version 2.5.1
Risk
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-58ju-4qx6-tka5
Aliases:
CVE-2011-1522
SQL Injection in doctrine orm Multiple SQL injection vulnerabilities in the `Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery` function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.
2.1.3
Affected by 0 other vulnerabilities.
VCID-pt1n-7yfb-a7d4
Aliases:
CVE-2015-5723
Security Misconfiguration Vulnerability Doctrine uses `mkdir($cacheDirectory )` to create caches directories. if your application runs with a umask of
2.4.8
Affected by 0 other vulnerabilities.
2.5.1
Affected by 0 other vulnerabilities.
VCID-zfw9-zevs-7uaq
Aliases:
GHSA-6q9v-4hq6-5m67
Doctrine SQL injection vulnerability
2.0.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T01:03:10.495605+00:00 GHSA Importer Affected by VCID-zfw9-zevs-7uaq https://github.com/advisories/GHSA-6q9v-4hq6-5m67 38.6.0
2026-05-30T20:52:28.208545+00:00 GitLab Importer Affected by VCID-pt1n-7yfb-a7d4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/doctrine/orm/CVE-2015-5723.yml 38.6.0
2026-05-30T20:51:54.898618+00:00 GitLab Importer Affected by VCID-58ju-4qx6-tka5 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/doctrine/orm/CVE-2011-1522.yml 38.6.0