vendure-ecommerce vendure

• CVE-2024-48914 Critical 9.1 Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy 60.4%
• CVE-2022-23065 Medium 5.4 Vendure - XSS via SVG File Upload 0.6%