GIVE YOUR AGENT THE EVIDENCE

Set up in your agent.

One prompt to get started. Paste it into your coding agent to connect cve.new through MCP and bring vulnerability context into your workflow.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

cve.new
Packagist / PACKAGE INTELLIGENCE

badaso/core

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

badaso/core Packagist
Ecosystem versions

Earlier releases through 2.9.11 (inclusive)

No fix recorded for this interval.

124 explicitly affected versions

1.0.0, 1.0.0-alpha.1, 1.0.0-alpha.10, 1.0.0-alpha.11, 1.0.0-alpha.12, 1.0.0-alpha.13, 1.0.0-alpha.14, 1.0.0-alpha.15, 1.0.0-alpha.16, 1.0.0-alpha.17, 1.0.0-alpha.18, 1.0.0-alpha.19, 1.0.0-alpha.2, 1.0.0-alpha.20, 1.0.0-alpha.21, 1.0.0-alpha.22, 1.0.0-alpha.23, 1.0.0-alpha.24, 1.0.0-alpha.25, 1.0.0-alpha.26, 1.0.0-alpha.27, 1.0.0-alpha.28, 1.0.0-alpha.29, 1.0.0-alpha.3, 1.0.0-alpha.30, 1.0.0-alpha.31, 1.0.0-alpha.32, 1.0.0-alpha.33, 1.0.0-alpha.34, 1.0.0-alpha.35, 1.0.0-alpha.36, 1.0.0-alpha.37, 1.0.0-alpha.38, 1.0.0-alpha.39, 1.0.0-alpha.4, 1.0.0-alpha.40, 1.0.0-alpha.5, 1.0.0-alpha.6, 1.0.0-alpha.7, 1.0.0-alpha.8, 1.0.0-alpha.9, 1.0.0-rc, 1.0.0-rc.1, 1.0.0-rc.10, 1.0.0-rc.11, 1.0.0-rc.12, 1.0.0-rc.13, 1.0.0-rc.14, 1.0.0-rc.15, 1.0.0-rc.2, 1.0.0-rc.3, 1.0.0-rc.4, 1.0.0-rc.5, 1.0.0-rc.6, 1.0.0-rc.7, 1.0.0-rc.8, 1.0.0-rc.9, 1.0.1, 1.0.2, 2.0.0, 2.0.0-alpha, 2.0.0-rc, 2.0.0-rc.1, 2.0.0-rc.10, 2.0.0-rc.11, 2.0.0-rc.12, 2.0.0-rc.13, 2.0.0-rc.14, 2.0.0-rc.2, 2.0.0-rc.3, 2.0.0-rc.4, 2.0.0-rc.5, 2.0.0-rc.6, 2.0.0-rc.7, 2.0.0-rc.8, 2.0.0-rc.9, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.7.0, 2.7.1, 2.8.0, 2.8.1, 2.8.2, 2.9.0, 2.9.1, 2.9.10, 2.9.11, 2.9.2, 2.9.3, 2.9.4, 2.9.5, 2.9.6, 2.9.7, 2.9.8, 2.9.9

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "last_affected": "2.9.11"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "1.0.0",
    "1.0.0-alpha.1",
    "1.0.0-alpha.10",
    "1.0.0-alpha.11",
    "1.0.0-alpha.12",
    "1.0.0-alpha.13",
    "1.0.0-alpha.14",
    "1.0.0-alpha.15",
    "1.0.0-alpha.16",
    "1.0.0-alpha.17",
    "1.0.0-alpha.18",
    "1.0.0-alpha.19",
    "1.0.0-alpha.2",
    "1.0.0-alpha.20",
    "1.0.0-alpha.21",
    "1.0.0-alpha.22",
    "1.0.0-alpha.23",
    "1.0.0-alpha.24",
    "1.0.0-alpha.25",
    "1.0.0-alpha.26",
    "1.0.0-alpha.27",
    "1.0.0-alpha.28",
    "1.0.0-alpha.29",
    "1.0.0-alpha.3",
    "1.0.0-alpha.30",
    "1.0.0-alpha.31",
    "1.0.0-alpha.32",
    "1.0.0-alpha.33",
    "1.0.0-alpha.34",
    "1.0.0-alpha.35",
    "1.0.0-alpha.36",
    "1.0.0-alpha.37",
    "1.0.0-alpha.38",
    "1.0.0-alpha.39",
    "1.0.0-alpha.4",
    "1.0.0-alpha.40",
    "1.0.0-alpha.5",
    "1.0.0-alpha.6",
    "1.0.0-alpha.7",
    "1.0.0-alpha.8",
    "1.0.0-alpha.9",
    "1.0.0-rc",
    "1.0.0-rc.1",
    "1.0.0-rc.10",
    "1.0.0-rc.11",
    "1.0.0-rc.12",
    "1.0.0-rc.13",
    "1.0.0-rc.14",
    "1.0.0-rc.15",
    "1.0.0-rc.2",
    "1.0.0-rc.3",
    "1.0.0-rc.4",
    "1.0.0-rc.5",
    "1.0.0-rc.6",
    "1.0.0-rc.7",
    "1.0.0-rc.8",
    "1.0.0-rc.9",
    "1.0.1",
    "1.0.2",
    "2.0.0",
    "2.0.0-alpha",
    "2.0.0-rc",
    "2.0.0-rc.1",
    "2.0.0-rc.10",
    "2.0.0-rc.11",
    "2.0.0-rc.12",
    "2.0.0-rc.13",
    "2.0.0-rc.14",
    "2.0.0-rc.2",
    "2.0.0-rc.3",
    "2.0.0-rc.4",
    "2.0.0-rc.5",
    "2.0.0-rc.6",
    "2.0.0-rc.7",
    "2.0.0-rc.8",
    "2.0.0-rc.9",
    "2.0.1",
    "2.0.2",
    "2.1.0",
    "2.2.0",
    "2.2.1",
    "2.2.2",
    "2.3.0",
    "2.3.1",
    "2.4.0",
    "2.4.1",
    "2.4.10",
    "2.4.11",
    "2.4.12",
    "2.4.13",
    "2.4.14",
    "2.4.2",
    "2.4.3",
    "2.4.4",
    "2.4.5",
    "2.4.6",
    "2.4.7",
    "2.4.8",
    "2.4.9",
    "2.5.0",
    "2.5.1",
    "2.5.2",
    "2.5.3",
    "2.6.0",
    "2.6.1",
    "2.6.2",
    "2.6.3",
    "2.7.0",
    "2.7.1",
    "2.8.0",
    "2.8.1",
    "2.8.2",
    "2.9.0",
    "2.9.1",
    "2.9.10",
    "2.9.11",
    "2.9.2",
    "2.9.3",
    "2.9.4",
    "2.9.5",
    "2.9.6",
    "2.9.7",
    "2.9.8",
    "2.9.9"
  ]
}
badaso/core Packagist
Ecosystem versions

Earlier releases before 2.7.0

Fixed in 2.7.0

107 explicitly affected versions

1.0.0, 1.0.0-alpha.1, 1.0.0-alpha.10, 1.0.0-alpha.11, 1.0.0-alpha.12, 1.0.0-alpha.13, 1.0.0-alpha.14, 1.0.0-alpha.15, 1.0.0-alpha.16, 1.0.0-alpha.17, 1.0.0-alpha.18, 1.0.0-alpha.19, 1.0.0-alpha.2, 1.0.0-alpha.20, 1.0.0-alpha.21, 1.0.0-alpha.22, 1.0.0-alpha.23, 1.0.0-alpha.24, 1.0.0-alpha.25, 1.0.0-alpha.26, 1.0.0-alpha.27, 1.0.0-alpha.28, 1.0.0-alpha.29, 1.0.0-alpha.3, 1.0.0-alpha.30, 1.0.0-alpha.31, 1.0.0-alpha.32, 1.0.0-alpha.33, 1.0.0-alpha.34, 1.0.0-alpha.35, 1.0.0-alpha.36, 1.0.0-alpha.37, 1.0.0-alpha.38, 1.0.0-alpha.39, 1.0.0-alpha.4, 1.0.0-alpha.40, 1.0.0-alpha.5, 1.0.0-alpha.6, 1.0.0-alpha.7, 1.0.0-alpha.8, 1.0.0-alpha.9, 1.0.0-rc, 1.0.0-rc.1, 1.0.0-rc.10, 1.0.0-rc.11, 1.0.0-rc.12, 1.0.0-rc.13, 1.0.0-rc.14, 1.0.0-rc.15, 1.0.0-rc.2, 1.0.0-rc.3, 1.0.0-rc.4, 1.0.0-rc.5, 1.0.0-rc.6, 1.0.0-rc.7, 1.0.0-rc.8, 1.0.0-rc.9, 1.0.1, 1.0.2, 2.0.0, 2.0.0-alpha, 2.0.0-rc, 2.0.0-rc.1, 2.0.0-rc.10, 2.0.0-rc.11, 2.0.0-rc.12, 2.0.0-rc.13, 2.0.0-rc.14, 2.0.0-rc.2, 2.0.0-rc.3, 2.0.0-rc.4, 2.0.0-rc.5, 2.0.0-rc.6, 2.0.0-rc.7, 2.0.0-rc.8, 2.0.0-rc.9, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.6.0, 2.6.1, 2.6.2, 2.6.3

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "2.7.0"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "1.0.0",
    "1.0.0-alpha.1",
    "1.0.0-alpha.10",
    "1.0.0-alpha.11",
    "1.0.0-alpha.12",
    "1.0.0-alpha.13",
    "1.0.0-alpha.14",
    "1.0.0-alpha.15",
    "1.0.0-alpha.16",
    "1.0.0-alpha.17",
    "1.0.0-alpha.18",
    "1.0.0-alpha.19",
    "1.0.0-alpha.2",
    "1.0.0-alpha.20",
    "1.0.0-alpha.21",
    "1.0.0-alpha.22",
    "1.0.0-alpha.23",
    "1.0.0-alpha.24",
    "1.0.0-alpha.25",
    "1.0.0-alpha.26",
    "1.0.0-alpha.27",
    "1.0.0-alpha.28",
    "1.0.0-alpha.29",
    "1.0.0-alpha.3",
    "1.0.0-alpha.30",
    "1.0.0-alpha.31",
    "1.0.0-alpha.32",
    "1.0.0-alpha.33",
    "1.0.0-alpha.34",
    "1.0.0-alpha.35",
    "1.0.0-alpha.36",
    "1.0.0-alpha.37",
    "1.0.0-alpha.38",
    "1.0.0-alpha.39",
    "1.0.0-alpha.4",
    "1.0.0-alpha.40",
    "1.0.0-alpha.5",
    "1.0.0-alpha.6",
    "1.0.0-alpha.7",
    "1.0.0-alpha.8",
    "1.0.0-alpha.9",
    "1.0.0-rc",
    "1.0.0-rc.1",
    "1.0.0-rc.10",
    "1.0.0-rc.11",
    "1.0.0-rc.12",
    "1.0.0-rc.13",
    "1.0.0-rc.14",
    "1.0.0-rc.15",
    "1.0.0-rc.2",
    "1.0.0-rc.3",
    "1.0.0-rc.4",
    "1.0.0-rc.5",
    "1.0.0-rc.6",
    "1.0.0-rc.7",
    "1.0.0-rc.8",
    "1.0.0-rc.9",
    "1.0.1",
    "1.0.2",
    "2.0.0",
    "2.0.0-alpha",
    "2.0.0-rc",
    "2.0.0-rc.1",
    "2.0.0-rc.10",
    "2.0.0-rc.11",
    "2.0.0-rc.12",
    "2.0.0-rc.13",
    "2.0.0-rc.14",
    "2.0.0-rc.2",
    "2.0.0-rc.3",
    "2.0.0-rc.4",
    "2.0.0-rc.5",
    "2.0.0-rc.6",
    "2.0.0-rc.7",
    "2.0.0-rc.8",
    "2.0.0-rc.9",
    "2.0.1",
    "2.0.2",
    "2.1.0",
    "2.2.0",
    "2.2.1",
    "2.2.2",
    "2.3.0",
    "2.3.1",
    "2.4.0",
    "2.4.1",
    "2.4.10",
    "2.4.11",
    "2.4.12",
    "2.4.13",
    "2.4.14",
    "2.4.2",
    "2.4.3",
    "2.4.4",
    "2.4.5",
    "2.4.6",
    "2.4.7",
    "2.4.8",
    "2.4.9",
    "2.5.0",
    "2.5.1",
    "2.5.2",
    "2.5.3",
    "2.6.0",
    "2.6.1",
    "2.6.2",
    "2.6.3"
  ]
}
badaso/core Packagist
Ecosystem versions

Earlier releases before 2.6.1

Fixed in 2.6.1

104 explicitly affected versions

1.0.0, 1.0.0-alpha.1, 1.0.0-alpha.10, 1.0.0-alpha.11, 1.0.0-alpha.12, 1.0.0-alpha.13, 1.0.0-alpha.14, 1.0.0-alpha.15, 1.0.0-alpha.16, 1.0.0-alpha.17, 1.0.0-alpha.18, 1.0.0-alpha.19, 1.0.0-alpha.2, 1.0.0-alpha.20, 1.0.0-alpha.21, 1.0.0-alpha.22, 1.0.0-alpha.23, 1.0.0-alpha.24, 1.0.0-alpha.25, 1.0.0-alpha.26, 1.0.0-alpha.27, 1.0.0-alpha.28, 1.0.0-alpha.29, 1.0.0-alpha.3, 1.0.0-alpha.30, 1.0.0-alpha.31, 1.0.0-alpha.32, 1.0.0-alpha.33, 1.0.0-alpha.34, 1.0.0-alpha.35, 1.0.0-alpha.36, 1.0.0-alpha.37, 1.0.0-alpha.38, 1.0.0-alpha.39, 1.0.0-alpha.4, 1.0.0-alpha.40, 1.0.0-alpha.5, 1.0.0-alpha.6, 1.0.0-alpha.7, 1.0.0-alpha.8, 1.0.0-alpha.9, 1.0.0-rc, 1.0.0-rc.1, 1.0.0-rc.10, 1.0.0-rc.11, 1.0.0-rc.12, 1.0.0-rc.13, 1.0.0-rc.14, 1.0.0-rc.15, 1.0.0-rc.2, 1.0.0-rc.3, 1.0.0-rc.4, 1.0.0-rc.5, 1.0.0-rc.6, 1.0.0-rc.7, 1.0.0-rc.8, 1.0.0-rc.9, 1.0.1, 1.0.2, 2.0.0, 2.0.0-alpha, 2.0.0-rc, 2.0.0-rc.1, 2.0.0-rc.10, 2.0.0-rc.11, 2.0.0-rc.12, 2.0.0-rc.13, 2.0.0-rc.14, 2.0.0-rc.2, 2.0.0-rc.3, 2.0.0-rc.4, 2.0.0-rc.5, 2.0.0-rc.6, 2.0.0-rc.7, 2.0.0-rc.8, 2.0.0-rc.9, 2.0.1, 2.0.2, 2.1.0, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.6.0

View affected-version evidence
{
  "ranges": [
    {
      "events": [
        {
          "introduced": "0"
        },
        {
          "fixed": "2.6.1"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "1.0.0",
    "1.0.0-alpha.1",
    "1.0.0-alpha.10",
    "1.0.0-alpha.11",
    "1.0.0-alpha.12",
    "1.0.0-alpha.13",
    "1.0.0-alpha.14",
    "1.0.0-alpha.15",
    "1.0.0-alpha.16",
    "1.0.0-alpha.17",
    "1.0.0-alpha.18",
    "1.0.0-alpha.19",
    "1.0.0-alpha.2",
    "1.0.0-alpha.20",
    "1.0.0-alpha.21",
    "1.0.0-alpha.22",
    "1.0.0-alpha.23",
    "1.0.0-alpha.24",
    "1.0.0-alpha.25",
    "1.0.0-alpha.26",
    "1.0.0-alpha.27",
    "1.0.0-alpha.28",
    "1.0.0-alpha.29",
    "1.0.0-alpha.3",
    "1.0.0-alpha.30",
    "1.0.0-alpha.31",
    "1.0.0-alpha.32",
    "1.0.0-alpha.33",
    "1.0.0-alpha.34",
    "1.0.0-alpha.35",
    "1.0.0-alpha.36",
    "1.0.0-alpha.37",
    "1.0.0-alpha.38",
    "1.0.0-alpha.39",
    "1.0.0-alpha.4",
    "1.0.0-alpha.40",
    "1.0.0-alpha.5",
    "1.0.0-alpha.6",
    "1.0.0-alpha.7",
    "1.0.0-alpha.8",
    "1.0.0-alpha.9",
    "1.0.0-rc",
    "1.0.0-rc.1",
    "1.0.0-rc.10",
    "1.0.0-rc.11",
    "1.0.0-rc.12",
    "1.0.0-rc.13",
    "1.0.0-rc.14",
    "1.0.0-rc.15",
    "1.0.0-rc.2",
    "1.0.0-rc.3",
    "1.0.0-rc.4",
    "1.0.0-rc.5",
    "1.0.0-rc.6",
    "1.0.0-rc.7",
    "1.0.0-rc.8",
    "1.0.0-rc.9",
    "1.0.1",
    "1.0.2",
    "2.0.0",
    "2.0.0-alpha",
    "2.0.0-rc",
    "2.0.0-rc.1",
    "2.0.0-rc.10",
    "2.0.0-rc.11",
    "2.0.0-rc.12",
    "2.0.0-rc.13",
    "2.0.0-rc.14",
    "2.0.0-rc.2",
    "2.0.0-rc.3",
    "2.0.0-rc.4",
    "2.0.0-rc.5",
    "2.0.0-rc.6",
    "2.0.0-rc.7",
    "2.0.0-rc.8",
    "2.0.0-rc.9",
    "2.0.1",
    "2.0.2",
    "2.1.0",
    "2.2.0",
    "2.2.1",
    "2.2.2",
    "2.3.0",
    "2.3.1",
    "2.4.0",
    "2.4.1",
    "2.4.10",
    "2.4.11",
    "2.4.12",
    "2.4.13",
    "2.4.14",
    "2.4.2",
    "2.4.3",
    "2.4.4",
    "2.4.5",
    "2.4.6",
    "2.4.7",
    "2.4.8",
    "2.4.9",
    "2.5.0",
    "2.5.1",
    "2.5.2",
    "2.5.3",
    "2.6.0"
  ]
}