@vendure/dashboard vulnerabilities (npm)

1 vulnerability.

• @vendure/dashboard npm Vendure: Stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions CVE-2026-63459 Fix available 8.7 HighSeptember 17, 2026