Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/product-community-edition@2.2.0
purl pkg:composer/magento/product-community-edition@2.2.0
Next non-vulnerable version 2.2.9
Latest non-vulnerable version 2.3.2
Risk score 4.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-89ch-hqf9-rgp3
Aliases:
CVE-2019-8121
Using JS libraries with known security vulnerabilities An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 …
2.2.10
Not vulnerable
GHSA-wmrg-w9vg-7jqx
Aliases:
CVE-2019-7865
Magento 2 Community Edition CSRF Vulnerability A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento …
2.2.9
Not vulnerable
2.2.9
Not vulnerable
GHSA-6qh6-v99h-vh4c
Aliases:
CVE-2019-7876
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 …
2.2.9
Not vulnerable
2.2.9
Not vulnerable
GHSA-mgfr-44wv-hqv6
Aliases:
CVE-2019-7938
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source …
2.2.9
Not vulnerable
2.2.9
Not vulnerable
This package is not known to fix any advisories.