shopware/storefront
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Shopware Storefront Reflected XSS in Storefront Login Page | shopware/shopwareshopware/storefront | Composer | High | Fix reported | |
| Shopware's session is persistent in Cache for 404 pages | shopware/platformshopware/storefront | Composer | High | Fix reported | |
| HTTP caching is marking private HTTP headers as public in Shopware | shopware/coreshopware/platform | Composer | Medium | Fix reported | |
| HTML injection possibility in voucher code form in Shopware | shopware/coreshopware/platform | Composer | Medium | Fix reported | |
| Shopware guest session is shared between customers | shopware/platformshopware/storefront | Composer | Medium | Fix reported |