Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Vendure-ecommerce
Vendure
Vendure-ecommerce Vendure vulnerabilities
vendure
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
CVE-2024-48914
Public exploit
Fix available
EPSS 60.4%
9.1
Critical
October 15, 2024
vendure
Vendure - XSS via SVG File Upload
CVE-2022-23065
5.4
Medium
May 2, 2022
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open