Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (5)

Advisory Summary Aliases
GHSA-r355-75hw-r8jf
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … CVE-2025-54265
GHSA-qvwr-p3hj-j6jf
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … CVE-2025-54267
GHSA-2768-5wmv-cfff
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … CVE-2025-54264
GHSA-pcrx-r49h-x2w5
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … CVE-2025-54266
GHSA-69x9-xp2j-w8g8
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … CVE-2025-54263