Search for packages
| purl | pkg:composer/magento/community-edition@2.4.7-p8 |
| Next non-vulnerable version | 2.4.9-alpha3 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2024-20758
Aliases: GHSA-wh4m-6rh3-p4rq |
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2024-20759
Aliases: GHSA-59vf-hjxc-f9c5 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
Vulnerable Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-r355-75hw-r8jf
|
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … |
CVE-2025-54265
|
|
GHSA-qvwr-p3hj-j6jf
|
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
CVE-2025-54267
|
|
GHSA-2768-5wmv-cfff
|
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
CVE-2025-54264
|
|
GHSA-pcrx-r49h-x2w5
|
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
CVE-2025-54266
|
|
GHSA-69x9-xp2j-w8g8
|
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
CVE-2025-54263
|