shopper/framework vulnerabilities (Packagist)
12 vulnerabilities.
-
shopper/frameworkPackagist Shopper: Missing authorization on product removal actions in CollectionProducts component 8.1 High -
shopper/frameworkPackagist Shopper: Incomplete fix for GHSA-h4mp-g9c6-xwph: Media sub-form store() still lacks authorization 6.5 Medium -
shopper/frameworkPackagist Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component 8.1 High -
shopper/frameworkPackagist Shopper: read-only team permissions allow administrator creation and permission escalation 8.8 High -
shopper/frameworkPackagist Shopper: Missing function-level authorization on Settings tax/zone/shipping Livewire components allows a low-privileged user to delete commerce configuration 5.4 Medium -
shopper/frameworkPackagist Shopper: Negative discount values accepted and propagated through order calculation pipeline 6.5 Medium -
shopper/frameworkPackagist Shopper: Authorization bypass in Filament bulk actions allows browse-only staff to mass-delete attributes/tags and mass-toggle visibility of brands/categories/suppliers 8.1 High -
shopper/frameworkPackagist Shopper: Multiple data integrity and disclosure issues in admin Livewire components 8.7 High -
shopper/frameworkPackagist Shopper: Missing authorization on Product admin Livewire sub-form components 6.5 Medium -
shopper/frameworkPackagist Shopper: Authorization bypass and RBAC privilege escalation in team settings 9.9 Critical -
shopper/frameworkPackagist Shopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables 6.5 Medium -
shopper/frameworkPackagist Shopper: Authorization bypass in multiple Livewire admin components 8.1 High