EUVD-2025-10294

Malicious code in bioql PyPI...

CVE-2025-27892

Shopware prior to version 6.5.8.13 is affected by a SQL injection vulnerability in the /api/search/order endpoint. NOTE: this issue exists because of a CVE-2024-22406 and CVE-2024-42357 regression...

CVE-2025-27892

Shopware versions prior to 6.5.8.13 are affected by a SQL injection vulnerability in the /api/search/order endpoint, caused by a regression of CVE-2024-22406 and CVE-2024-42357. The vulnerability specifically impacts the name field within the aggregations nested object of the search API. Authenti...