shopware/shopware vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-23498Highshopware/shopware: Shopware Has Improper Control of Generation of Code in Twig rendered views CVE-2025-67648Highshopware/shopware: Shopware Storefront Reflected XSS in Storefront Login Page GHSA-9V82-VCJX-M76JHighshopware/shopware: Shopware: Reflective Cross Site-Scripting (XSS) in CMS components GHSA-83JV-4PRM-34G7Criticalshopware/shopware: Shopware Remote Code Execution Vulnerability GHSA-7336-GHHP-F2QJCriticalshopware/shopware: Shopware Remote Code Execution Vulnerability GHSA-JQR7-5H7R-CH8PMediumshopware/shopware: Shopware Non-Persistent XSS in the Frontend GHSA-Q3G4-2VW9-XV27Criticalshopware/shopware: Shopware Remote Code Execution Vulnerability CVE-2023-34099Mediumshopware/shopware: Shopware improper mail validation vulnerability CVE-2023-34098Mediumshopware/shopware: Shopware dependency configuration exposed CVE-2022-48150Mediumshopware/shopware: Shopware vulnerable to cross-site scripting (XSS)CVE-2022-36101Mediumshopware/shopware: Shopware contains sensitive data in backend customer module CVE-2022-36102Mediumshopware/shopware: Shopware access control list bypassed via crafted specific URLs CVE-2022-31148Mediumshopware/shopware: Shopware vulnerable to persistent cross site scripting (XSS) in customer module CVE-2022-31057Mediumshopware/shopware: Authenticated Stored Cross-site Scripting in Shopware CVE-2019-12935Mediumshopware/shopware: Shopware Cross-site Scripting Vulnerability CVE-2019-12799Highshopware/shopware: Shopware Insecure Deserialization Vulnerability CVE-2017-15374Mediumshopware/shopware: Shopware XSS Vulnerability CVE-2016-3109Criticalshopware/shopware: Shopware RCE Vulnerability CVE-2018-20713Highshopware/shopware: Shopware SQL Injection CVE-2017-18357Mediumshopware/shopware: Shopware XXE Vulnerability CVE-2022-24892Mediumshopware/shopware: Multiple valid tokens for password reset in Shopware CVE-2022-24879Highshopware/shopware: Malfunction of CSRF token validation in Shopware CVE-2022-24873Mediumshopware/shopware: Reflected Cross-site Scripting in Shopware storefront CVE-2022-21651Mediumshopware/shopware: Open redirect in shopware CVE-2022-21652Lowshopware/shopware: Insufficient Session Expiration in shopware

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo