Security advisories

high2021-08-23

Authenticated server-side request forgery in file upload via URL.

GHSA-gcvv-gq92-x94r · CVE-2021-37711

high2021-06-28

Private files publicly accessible with Cloud Storage providers

GHSA-vrf2-xghr-j52v

low2021-06-28

Creation of order credits was not validated by acl in admin orders

GHSA-g7w8-pp9w-7p32

critical2021-02-10

Leak of information via Store-API

GHSA-f2vv-h5x4-57gr

medium2020-10-19

Authenticated XML External Entity Processing

GHSA-8xv9-qcr9-ww9j

low2020-09-23

Non-persistent XSS in the Storefront in Shopware

GHSA-qvhr-55hg-3qwv