Search for packages
| purl | pkg:composer/magento/community-edition@2.4.6-p6 |
| Next non-vulnerable version | 2.4.6-p9 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score | 4.1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-6ff8-jrfg-43hh
Aliases: CVE-2025-24425 |
Magento Business Logic Error vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business … |
Not vulnerable |
|
GHSA-rjjw-g6hw-7pc9
Aliases: CVE-2025-24416 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-v6r2-425c-hfrr
Aliases: CVE-2025-24421 |
Magento Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization … |
Not vulnerable |
|
GHSA-g3j6-9753-8mp2
Aliases: CVE-2025-24417 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-xwgx-8v72-4j5j
Aliases: CVE-2025-24413 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-3cfg-w257-cgf8
Aliases: CVE-2025-24408 |
Magento Information Exposure vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure … |
Not vulnerable |
|
GHSA-gjxp-46rq-wg4q
Aliases: CVE-2025-24410 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-469f-wf4f-3jjv
Aliases: CVE-2025-24437 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-vw47-79jv-3598
Aliases: CVE-2025-24409 |
Adobe Commerce Improper Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-gc27-rvvm-q77r
Aliases: CVE-2025-24415 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-82p4-55gj-956p
Aliases: CVE-2025-24435 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-8884-7rm9-mrx4
Aliases: CVE-2025-24438 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-7jmr-43qj-pw47
Aliases: CVE-2025-24432 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
Not vulnerable |
|
GHSA-mm87-rrqx-94cr
Aliases: CVE-2025-24428 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-v3hq-g424-5mgg
Aliases: CVE-2025-24427 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-539v-w87w-w62c
Aliases: CVE-2025-24424 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-954p-ff72-327w
Aliases: CVE-2025-24406 |
Adobe Commerce Path Traversal Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation … |
Not vulnerable |
|
GHSA-36hw-x3cc-m258
Aliases: CVE-2025-24411 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-656q-fx2w-8ccv
Aliases: CVE-2025-24429 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-6w27-c66f-gvhq
Aliases: CVE-2025-24430 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
Not vulnerable |
|
GHSA-fppq-f2m6-xv5c
Aliases: CVE-2025-24434 |
Improper Authorization vulnerability in Magento and Adobe Commerce Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected … |
Not vulnerable |
|
GHSA-fhw6-3mj5-w9gv
Aliases: CVE-2025-24414 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-m4rg-mpp2-97px
Aliases: CVE-2025-24412 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Not vulnerable |
|
GHSA-ghpr-6qhr-rpp8
Aliases: CVE-2025-24436 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Not vulnerable |
|
GHSA-4f89-5cwm-rm5g
Aliases: CVE-2024-45134 |
Magento Open Source Information Exposure vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-cg52-68fv-94qq
Aliases: CVE-2024-45118 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-v3v6-jfvw-m576
Aliases: CVE-2024-45130 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-w3p2-pc3h-69wv
Aliases: CVE-2024-45124 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-g9fm-wc6h-pvgj
Aliases: CVE-2024-45119 |
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 (and earlier) are affected by … |
Vulnerable |
|
GHSA-w7rg-7wq2-pjrw
Aliases: CVE-2024-45149 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-873m-72g6-853g
Aliases: CVE-2024-45116 |
Magento Open Source Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-2qhq-fw98-h6wg
Aliases: CVE-2024-45121 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-xc5p-773w-m3pm
Aliases: CVE-2024-45131 |
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-m58h-998x-66f3
Aliases: CVE-2024-45129 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-8pxg-gcp4-57ww
Aliases: CVE-2024-45135 |
Magento Open Source Improper Access Control vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-qpp7-742q-58j3
Aliases: CVE-2024-45128 |
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-47jp-46c9-25vf
Aliases: CVE-2024-45120 |
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
Vulnerable |
|
GHSA-3fr3-gcqh-3m2g
Aliases: CVE-2024-45117 |
Magento Open Source Improper Input Validation vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-5f64-ppmg-cvvm
Aliases: CVE-2024-45132 |
Magento Open Source Improper Authorization vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-j3mh-wx5f-2vhg
Aliases: CVE-2024-45133 |
Magento Open Source Information Exposure vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-xg36-8c2v-jpxh
Aliases: CVE-2024-45125 |
Magento Open Source Incorrect Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
Vulnerable |
|
GHSA-46fm-x82m-5f74
Aliases: CVE-2024-45122 |
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
Vulnerable |
|
GHSA-88x2-cq34-5fwc
Aliases: CVE-2024-45123 |
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
Vulnerable |
|
GHSA-c89g-gq5r-2xw2
Aliases: CVE-2024-45127 |
Magento Open Source stored Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
Vulnerable |
|
GHSA-52fg-wjxm-pp44
Aliases: CVE-2024-39400 |
Magento DOM-based Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site … |
Vulnerable |
|
GHSA-74w7-cr4v-wf2v
Aliases: CVE-2024-39419 |
Magento Improper Access Control Leads to Privilege escalation Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by … |
Vulnerable |
|
GHSA-7r99-8wqp-h7pc
Aliases: CVE-2024-39399 |
Magento Path Traversal vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a … |
Vulnerable |
|
GHSA-6pxh-2557-5cj5
Aliases: CVE-2024-39406 |
Magento Open Source Path Traversal vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-5g9f-7gqc-8hj4
Aliases: CVE-2024-39405 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-8frp-pxq2-3gpq
Aliases: CVE-2024-39401 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-4xmj-f664-hv98
Aliases: CVE-2024-39417 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-rf4q-m23c-7q8r
Aliases: CVE-2024-39409 |
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected … |
Vulnerable |
|
GHSA-cjm6-8mw8-2f8c
Aliases: CVE-2024-39407 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-qm77-mqf3-fmhq
Aliases: CVE-2024-39411 |
Magento Improper Authorization leads to security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-8w5f-8992-g86j
Aliases: CVE-2024-39413 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-mmp7-8cg4-9wrg
Aliases: CVE-2024-39403 |
Magento Stored Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site … |
Vulnerable |
|
GHSA-gj93-84g5-mcjq
Aliases: CVE-2024-39415 |
Magento Improper Authorization Leading to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4cj6-f32v-6hgx
Aliases: CVE-2024-39408 |
Magento Open Source Cross-Site Request Forgery vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by … |
Vulnerable |
|
GHSA-2ff6-837j-hg5x
Aliases: CVE-2024-39402 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-q628-54wg-4r5q
Aliases: CVE-2024-39398 |
Magento does not properly restrict excessive authentication attempts Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4xgg-rw35-7mv5
Aliases: CVE-2024-39416 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4323-f82v-f6jr
Aliases: CVE-2024-39410 |
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected … |
Vulnerable |
|
GHSA-7472-vw39-g2j3
Aliases: CVE-2024-39412 |
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-gvgf-pvh5-vjh4
Aliases: CVE-2024-39418 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-x6f9-hv9r-fgq4
Aliases: CVE-2024-39414 |
Magento Improper Access Control Leads to Privilege escalation Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-qrh3-vxjg-h9h6
Aliases: CVE-2024-39404 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-jmqp-r3gg-6jh3
|
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by … |
CVE-2024-34111
|
|
GHSA-wwj3-573j-rvvm
|
Magento Open Source Improper Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
CVE-2024-34104
|
|
GHSA-r7cm-g469-wm4g
|
Magento Open Source Improper Access Control vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an … |
CVE-2024-34107
|
|
GHSA-m8cj-3v68-3cxj
|
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, … |
CVE-2024-34102
|
|
GHSA-p6h9-gx5g-wg64
|
Magento Open Source Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect … |
CVE-2024-34106
|
|
GHSA-5632-wq7m-gfq9
|
Magento Open Source Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a … |
CVE-2024-34105
|
|
GHSA-f7q4-9gwv-6774
|
Magento Open Source Improper Authentication vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
CVE-2024-34103
|