Shopware / Core

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-31889	Shopware has a potential take over of app credentials	HIGH	8.9	Mar 11, 2026
CVE-2026-31888	Shopware has user enumeration via distinct error codes on Store API login endpoint	MEDIUM	5.3	Mar 11, 2026
CVE-2026-31887	Shopware unauthenticated data extraction possible through store-api.order endpoint	HIGH	8.9	Mar 11, 2026

Rows per page

Showing 1 to 3 of 3 CVEs