Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-2768-5wmv-cfff
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento vulnerable to stored Cross-Site Scripting (XSS) 14 Oct 2025
  • Fix available
  • Severity - 8.1 (High)
GHSA-69x9-xp2j-w8g8
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento provides incorrect authorization through a security feature bypass 14 Oct 2025
  • Fix available
  • Severity - 8.1 (High)
GHSA-pcrx-r49h-x2w5
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento vulnerable to stored Cross-Site Scripting (XSS) 14 Oct 2025
  • Fix available
  • Severity - 4.8 (Medium)
GHSA-qvwr-p3hj-j6jf
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento vulnerable to privilege escalation due to incorrect authorization 14 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-r355-75hw-r8jf
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento allows incorrect authorization 14 Oct 2025
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-wh92-6q6g-px7j
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Community Edition Improper Input Validation vulnerability 09 Sep 2025
  • No fix available
  • Severity - 9.1 (Critical)
GHSA-5777-jj7p-mpqw
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Cross-Site Request Forgery (CSRF) vulnerability 12 Aug 2025
  • Fix available
  • Severity - 8.1 (High)
GHSA-7hrj-3c9x-xv5h
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento has incorrect authorization issue that leads to arbitrary file system read 12 Aug 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-8mq8-c243-2335
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Cross-site Scripting vulnerability 12 Aug 2025
  • Fix available
  • Severity - 8.7 (High)
GHSA-h4f4-gv6h-x824
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento vulnerable to path traversal 12 Aug 2025
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-wcmw-8xpp-rwfj
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability 12 Aug 2025
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-xgfm-992v-h2hr
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento vulnerable to denial of service 12 Aug 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-85jx-x9r4-45m2
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Authenticated Security feature bypass 26 Jun 2025
  • Fix available
  • Severity - 2.7 (Low)
GHSA-8hcx-xvww-6c6h
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Security feature bypass 26 Jun 2025
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-j934-vjh5-vf9r
  • Packagist/magento/community-edition
 Magneto contains stored XSS vulnerability 10 Jun 2025
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-r487-9vv5-75gg
  • Packagist/magento/community-edition
  • Packagist/magento/project-community-edition
 Magento Improper Authorization leading to security feature bypass 10 Jun 2025
  • Fix available
  • Severity - 8.2 (High)
Load more...