Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/mautic/core@6.0.0
purl pkg:composer/mautic/core@6.0.0
Next non-vulnerable version 6.0.7
Latest non-vulnerable version 7.0.1
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-x16f-ftqk-n3e2
Aliases:
CVE-2025-13828
GHSA-3fq7-c5m8-g86x
Mautic user without privileged access to the Marketplace can install and uninstall composer packages A non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked.
6.0.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T01:06:05.599855+00:00 GHSA Importer Affected by VCID-x16f-ftqk-n3e2 https://github.com/advisories/GHSA-3fq7-c5m8-g86x 38.6.0
2026-05-30T21:05:21.433264+00:00 GitLab Importer Affected by VCID-x16f-ftqk-n3e2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/mautic/core/CVE-2025-13828.yml 38.6.0