Security
فارسی
All products

shopper/framework

Composer · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Shopper: Missing authorization on product removal actions in CollectionProducts componentCVE-2026-56825 · GHSA-2CG9-97GQ-9MQP shopper/framework Composer High Fix reported
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)CVE-2026-56830 · GHSA-99H5-JHH7-V3R3 shopper/framework Composer Medium Fix reported
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock componentCVE-2026-56829 · GHSA-G3F9-G5VJ-P62F shopper/framework Composer High Fix reported
Shopper: privilege escalation via improper Livewire admin component authorizationCVE-2026-56828 · GHSA-J328-XMGP-J4Q3 shopper/framework Composer High Fix reported
Shopping privilege escalation through missing authorization in Settings componentsCVE-2026-56826 · GHSA-F7H9-QV4X-9X57 shopper/framework Composer Medium Fix reported
Shopper: Negative discount values accepted and propagated through order calculation pipelineCVE-2026-56831 · GHSA-5VF4-452P-JJHF shopper/framework Composer Medium Fix reported
Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliersCVE-2026-56827 · GHSA-243P-F3CV-C5WH shopper/framework Composer High Fix reported
Shopper: Authorization bypass and RBAC privilege escalation in team settingsCVE-2026-47744 · GHSA-C3QP-2GGW-XJG7 shopper/framework Composer Critical Fix reported
Shopper: Multiple data integrity and disclosure issues in admin Livewire componentsCVE-2026-47743 · GHSA-HR9V-R8R2-HG7J shopper/framework Composer High Fix reported
Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tablesCVE-2026-47745 · GHSA-FXQW-97CC-7G5C shopper/framework Composer Medium Fix reported
Shopper: Missing authorization on Product admin Livewire sub-form componentsCVE-2026-47742 · GHSA-H4MP-G9C6-XWPH shopper/framework Composer Medium Fix reported
shopper/framework: Authorization bypass in multiple Livewire admin componentsCVE-2026-47740 · GHSA-F946-9QP6-VGCH shopper/framework Composer High Fix reported