Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/product-community-edition@2.1.0
purl pkg:composer/magento/product-community-edition@2.1.0
Next non-vulnerable version 2.1.18
Latest non-vulnerable version 2.3.2
Risk score 4.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-wmrg-w9vg-7jqx
Aliases:
CVE-2019-7865
Magento 2 Community Edition CSRF Vulnerability A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento …
2.1.18
Not vulnerable
2.1.18
Not vulnerable
GHSA-6qh6-v99h-vh4c
Aliases:
CVE-2019-7876
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 …
2.1.18
Not vulnerable
2.1.18
Not vulnerable
GHSA-mgfr-44wv-hqv6
Aliases:
CVE-2019-7938
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source …
2.1.18
Not vulnerable
2.1.18
Not vulnerable
This package is not known to fix any advisories.