vendure-ecommerce/vendure Security Advisories | GitStock

critical2024-10-15

Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy

GHSA-r9mq-3c9r-fmjq · CVE-2024-48914

medium2023-11-17

@vendure/core's insecure currencyCode handling allows wrong payment amounts

GHSA-wm63-7627-ch33

low2023-07-11

Vendure Cross Site Request Forgery vulnerability impacting all API requests

GHSA-h9wq-xcqx-mqxm

medium2023-07-06

@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability

GHSA-gm68-572p-q28r