Aikido Intel
Secure My Code
Package Health

microsoft/microsoft-graph

The Microsoft Graph SDK for PHP

Latest v3.10.0PackagistPackagistMIT
Declared in package metadata.

93%

Total Score

healthy

218 releases since May 2017 and an active Microsoft-backed repository make this a dependable release to adopt.

Are you affected? Scan for Free

Health Score Breakdown

Workflow auditcaution

The project-auto-add.yml and release-please-gha.yml workflows mint app tokens with broader installation permissions than their steps need.

Vulnerabilities

TitleVersionsSeverity
CVE-2023-49282
microsoft/microsoft-graph is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 1.16.0 - 1.109.1 and 2.0.0-RC1 - 2.0.1.
1.16.0 - 1.109.12.0.0-RC1 - 2.0.1
Medium

Package versions

VersionPublishedVulnerabilities
v3.10.09 Nov 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.9.022 Oct 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.8.06 Oct 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.7.016 Sept 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.6.02 Sept 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.5.05 Aug 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.4.021 Jul 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.3.010 Jul 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.2.019 May 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total
v3.1.07 May 2026
0
0 critical, 0 total
0
0 high, 0 total
0
0 medium, 0 total
0
0 low, 0 total

Maintainers

Microsoft Graph Client Tooling

Direct Dependencies

DependencyLast ReleaseScore
microsoft/microsoft-graph-core
Version ^3.0.0
—
—

Weekly Downloads

Info

Last Published
3 days ago
Created
9 years ago

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

Start for Free Book a Demo

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPAuthorized

© All Intel data is openly available and commercially licensed.