Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@vendure/core

npm

A modern, headless ecommerce framework

View on github.com · View on npmjs.org

Security Advisories for @vendure/core in npm

Critical
4 months ago

@vendure/core has a SQL Injection vulnerability GSA_kwCzR0hTQS05cHAzLTUzcDItd3c5ds4ABVS9

npm @vendure/core
Low
7 months ago

Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy GSA_kwCzR0hTQS02ZjY1LTRmdjItd3djaM4ABRvk

npm @vendure/core
Moderate
almost 3 years ago

@vendure/core's insecure currencyCode handling allows wrong payment amounts GSA_kwCzR0hTQS13bTYzLTc2MjctY2gzM84AA3P1

npm @vendure/core
Low
about 3 years ago

Vendure Cross Site Request Forgery vulnerability impacting all API requests GSA_kwCzR0hTQS1oOXdxLXhjcXgtbXF4bc4AA0m0

npm @vendure/core

Filter by Severity

Low 2 Moderate 1 Critical 1