Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@1.9.4%2B5
purl pkg:composer/magento/community-edition@1.9.4%2B5
Tags Ghost
Next non-vulnerable version 2.4.6-p9
Latest non-vulnerable version 2.4.9-alpha3
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-9664

Code Injection Magento has a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.
2.0.0
Vulnerable
CVE-2020-9665

Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
2.0.0
Vulnerable
This package is not known to fix any advisories.