@evershop/evershop
The React Ecommerce platform. Built with Typescript, React and Postgres. Open-source and free. Fast and customizable.
Security Advisories for @evershop/evershop in npm
Moderate
7 months ago
evershop allows unauthenticated attackers to force server to initiate HTTP request via "GET /images" API
npm
@evershop/evershop
High
7 months ago
evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API
npm
@evershop/evershop
Low
9 months ago
EverShop is vulnerable to Unauthorized Order Information Access (IDOR)
npm
@evershop/evershop
High
over 2 years ago
EverShop vulnerable to improper authorization in GraphQL endpoints
npm
@evershop/evershop
Critical
over 2 years ago
EverShop at risk to unauthorized access via weak HMAC secret
npm
@evershop/evershop