757 matches found
Cross-site Scripting (XSS)
Overview shopware/storefront is a storefront for Shopware. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the waitTime or errorSnippet parameters in the login page, which are rendered directly in the template without input validation. An attacker can execute...
EUVD-2025-36970
Malicious code in appstorefrontcore npm...
MAL-2025-49094 Malicious code in app_storefront_core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d146e3723013cdb936cc74fc9a48a5aa197031f136e710ce28e0ceda08d8399d The package appstorefrontcore was found to contain malicious code. Source: ossf-package-analysis...
Missing Authorization
Overview shopware/storefront is a storefront for Shopware. Affected versions of this package are vulnerable to Missing Authorization via CancelOrderRoute. An attacker can cancel their own orders by sending a specially crafted request, even when refunds are disabled in the administration settings...
MAL-2025-48082 Malicious code in storefront-search-as-you-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32975
Malicious code in storefront-search-as-you-type npm...
Malicious code in storefront-search-as-you-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview storefront-search-as-you-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2003-0551
Malware in sbrugna...
EUVD-2005-0937
Malware in sbrugna...
EUVD-2020-1427
Malware in sbrugna...
EUVD-2008-1348
Malware in sbrugna...
EUVD-2005-0936
Malware in sbrugna...
EUVD-2020-7212
Malware in sbrugna...
EUVD-2020-29077
Malware in sbrugna...
EUVD-2007-2063
Malware in sbrugna...
EUVD-2025-5544
Malicious code in bioql PyPI...
EUVD-2024-54174
Malicious code in bioql PyPI...