Vendure vulnerabilities
Products
- Vendure 3
Newest
- vendure Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy 2.7 Low
- vendure Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy 9.1 Critical
- vendure Vendure - XSS via SVG File Upload 5.4 Medium