vendure-ecommerce

Products

ProductCVEsExploitedLatest
vendure2–Oct 15, 2024

Exploited and recent CVEs

  • CVE-2024-48914 Critical 9.1 Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy 60.4%
  • CVE-2022-23065 Medium 5.4 Vendure - XSS via SVG File Upload 0.6%