EUVD-2025-10294

Malicious code in bioql PyPI...

CVE-2025-27892

Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression...

CVE-2025-27892

Shopware versions prior to 6.5.8.13 are affected by a SQL injection vulnerability in the /api/search/order endpoint, caused by a regression of CVE-2024-22406 and CVE-2024-42357. The vulnerability specifically impacts the name field within the aggregations nested object of the search API. Authenti...

CVE-2024-22406 Blind SQL-injection in DAL aggregations in Shopware

Shopware is an open headless commerce platform. The Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the parameters in the “aggregations...