CoreShop
Coreshop · 3 CVEs
CVE-2026-41249
HIGH
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
Jun 4, 2026
CVE-2026-23959
MEDIUM
CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Jan 22, 2026
CVE-2026-22242
MEDIUM
CoreShop Vulnerable to SQL Injection via Admin Reports
Jan 8, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-41249 | CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration | HIGH | 0.55% | Jun 4, 2026 |
| CVE-2026-23959 | CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier | MEDIUM | 0.43% | Jan 22, 2026 |
| CVE-2026-22242 | CoreShop Vulnerable to SQL Injection via Admin Reports | MEDIUM | 0.43% | Jan 8, 2026 |
Showing 1 to 3 of 3 CVEs