All products

coreshop/core-shop

Composer · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` ConfigurationCVE-2026-41249 · GHSA-Q58J-G3F4-H26H coreshop/core-shop Composer High No fix reported
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifierCVE-2026-23959 · GHSA-FQCV-8859-86X2 coreshop/core-shop Composer Medium Fix reported
CoreShop Vulnerable to SQL Injection via Admin ReportsCVE-2026-22242 · GHSA-CH7P-MPV4-4VG4 coreshop/core-shop Composer Medium Fix reported