CVE-2026-42207

Magento Long Term Support LTS is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, MageProductAlertAddController::stockAction reads the uenc query parameter and passes...

CVE-2026-42207

creationtimestamp| type| source ---|---|--- 2026-05-04 20:56:13+00:00| published-proof-of-concept| https://github.com/OpenMage/magento-lts/security/advisories/GHSA-qpgq-5g92-j5q8 2026-05-16 00:17:16+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3mlwl2b4m6y2u...