CVE-2021-41188

Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the .htaccess file will protect against...

EUVD-2022-6128

Malicious code in bioql PyPI...

EUVD-2022-6913

Malicious code in bioql PyPI...

Cross-Site Scripting via SVG media files

Impact Cross-Site Scripting via SVG media files Patches We recommend updating to the current version 6.4.3.1. You can get the update to 6.4.3.1 regularly via the Auto-Updater or directly via the download overview. https://www.shopware.com/en/download/shopware-6 Workarounds For older versions of...

Remote Code Execution Vulnerability

More info at https://community.shopware.com/detail1989.html...