vendure @vendure/admin-ui-plugin vulnerabilities

Latest vendure @vendure/admin-ui-plugin CVEs

Newest publication first

1. GHSA-gm68-572p-q28r @vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability

   Published 2023-07-06

   Unknown

   Impact Vendure provides an authorization system with different levels of privileges. For example, an administrator cannot create another administrator. In the admin UI, there are a couple of places with description inputs, such as inventory/collection catalog, shipping methods, p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.