Vendure-ecommerce vulnerabilities

Products

• Vendure 2

Newest

• vendure Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy CVE-2024-48914 Public exploitFix available EPSS 60.4% 9.1 CriticalOctober 15, 2024
• vendure Vendure - XSS via SVG File Upload CVE-2022-23065 5.4 MediumMay 2, 2022