765 matches found
EUVD-2025-202167
Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in AuthController.php. A request parameter from the login page URL is directly rendered within the Twig template of the Storefront login page without further...
PT-2025-50561
Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in AuthController.php. A request parameter from the login page URL is directly rendered within the Twig template of the Storefront login page without further...
Cross-site Scripting (XSS)
Overview shopware/storefront is a storefront for Shopware. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the waitTime or errorSnippet parameters in the login page, which are rendered directly in the template without input validation. An attacker can execute...
EUVD-2025-36970
Malicious code in appstorefrontcore npm...
MAL-2025-49094 Malicious code in app_storefront_core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d146e3723013cdb936cc74fc9a48a5aa197031f136e710ce28e0ceda08d8399d The package appstorefrontcore was found to contain malicious code. Source: ossf-package-analysis...
Missing Authorization
Overview shopware/storefront is a storefront for Shopware. Affected versions of this package are vulnerable to Missing Authorization via CancelOrderRoute. An attacker can cancel their own orders by sending a specially crafted request, even when refunds are disabled in the administration settings...
MAL-2025-48082 Malicious code in storefront-search-as-you-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in storefront-search-as-you-type (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0e0258430f6ebc7401b9e28828d8433806e188a230f2a687fa206651d72978c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
EUVD-2025-32975
Malicious code in storefront-search-as-you-type npm...
Malicious Package
Overview storefront-search-as-you-type is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
EUVD-2003-0551
Malware in sbrugna...
EUVD-2008-1348
Malware in sbrugna...
EUVD-2005-0937
Malware in sbrugna...
EUVD-2005-0936
Malware in sbrugna...
EUVD-2020-1427
Malware in sbrugna...
EUVD-2007-2063
Malware in sbrugna...
EUVD-2020-29077
Malware in sbrugna...
EUVD-2020-7212
Malware in sbrugna...