magento/community-edition vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-39417Mediummagento/project-community-edition: Magento Improper Authorization leads to Security feature bypass CVE-2024-39413Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39406Mediummagento/community-edition: Magento Open Source Path Traversal vulnerability CVE-2024-39407Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39402Highmagento/project-community-edition: Magento OS Command ('OS Command Injection') vulnerability CVE-2024-39404Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39405Mediummagento/project-community-edition: Magento Improper Authorization vulnerability CVE-2024-39403Highmagento/project-community-edition: Magento Stored Cross-Site Scripting (XSS) vulnerability CVE-2024-39398Highmagento/project-community-edition: Magento does not properly restrict excessive authentication attempts CVE-2024-39401Highmagento/project-community-edition: Magento OS Command ('OS Command Injection') vulnerability CVE-2024-39400Highmagento/project-community-edition: Magento DOM-based Cross-Site Scripting (XSS) vulnerability CVE-2024-39399Highmagento/project-community-edition: Magento Path Traversal vulnerability CVE-2024-34111Mediummagento/community-edition: Magento Open Source Server-Side Request Forgery (SSRF) vulnerability CVE-2024-34102Criticalmagento/community-edition: Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE')…CVE-2024-34105Mediummagento/community-edition: Magento Open Source Cross-Site Scripting (XSS) vulnerability CVE-2024-34107Mediummagento/community-edition: Magento Open Source Improper Access Control vulnerability CVE-2024-34106Mediummagento/community-edition: Magento Open Source Incorrect Authorization vulnerability CVE-2024-34103Criticalmagento/community-edition: Magento Open Source Improper Authentication vulnerability CVE-2024-34104Highmagento/community-edition: Magento Open Source Improper Authorization vulnerability GHSA-8J7C-682X-R9F2Criticalmagento/community-edition: Magento RCE,XSS and other vulnerabilities GHSA-MCFC-67VM-J568Mediummagento/community-edition: Magento Cross-Site Scripting (XSS) vulnerability GHSA-5GMH-85X8-5CX7Criticalmagento/community-edition: Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities GHSA-CV25-3PXR-4Q7XCriticalmagento/community-edition: Magento Open Source Security Advisory: Patch SUPEE-10975 GHSA-26HQ-7286-MG8FCriticalmagento/community-edition: Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability GHSA-6WM4-3RJJ-C8XXCriticalmagento/community-edition: Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo