PkgRadar

Composer · packagist.org

concrete5/core

Remote Payload: matched "cURL "

Why PkgRadar flagged 9.5.2

SeveritySignalEvidence
mediumRemote Payloadmatched "cURL " · concretecms-concretecms-core-9f37af8/controllers/single_page/login.php
mediumRemote Payloadmatched "cURL " · concretecms-concretecms-core-9f37af8/controllers/single_page/register.php
mediumRemote Payloadmatched "curl " · concretecms-concretecms-core-9f37af8/elements/dashboard/marketplace_connect_failed.php
mediumRemote Payloadmatched "cUrl " · concretecms-concretecms-core-9f37af8/single_pages/dashboard/system/notification/events.php
mediumRemote Payloadmatched "cURL " · concretecms-concretecms-core-9f37af8/src/Marketplace/Marketplace.php
mediumRemote Payloadmatched "cUrl " · concretecms-concretecms-core-9f37af8/src/Notification/Events/Topic/ConcreteTopic.php

Scanned versions

VersionVerdictScoreScanned (UTC)
9.5.2High risk362026-06-03

Block this in CI

PkgRadar gates concrete5/core (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem composer concrete5/[email protected]