Products: 1
Vulnerabilities: 9
Known Exploited: 0
3
Critical Level Threats
2
High Level Threats
4
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-63459
Vendure: Stored XSS in the Admin Dashboard via unsafe HTML-stripping (innerHTML) of entity descriptions
Last Modified: Sep 21, 2026
Published: Sep 17, 2026
CVE-2026-63461
Vendure: Shop API list queries can return non-public entities when filterOperator is OR
Last Modified: Sep 17, 2026
Published: Sep 17, 2026
CVE-2026-63472
Vendure: External-authentication account takeover: external login linked to a pre-existing account by email without verification
Last Modified: Sep 17, 2026
Published: Sep 17, 2026
CVE-2026-63460
Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends
Last Modified: Sep 18, 2026
Published: Sep 17, 2026
CVE-2026-67347
Vendure 3.7.1 Cross-Channel Authorization Bypass via StockLocation and Asset Update
Last Modified: Aug 14, 2026
Published: Jul 30, 2026
Items Per Page
