vendurehq Vendure Vulnerabilities

Vendurehq Vendure vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

17 September 2026

Stored Cross-Site Scripting Vulnerability in Vendure Open-Source Commerce Platform
CVE-2026-63459
VendurehqVendure8.7HIGH
Information Disclosure in Vendure Open-Source Headless Commerce Platform
CVE-2026-63461
VendurehqVendure5.3MEDIUM
Authentication Flaw in Vendure Open-Source Commerce Platform
CVE-2026-63472
VendurehqVendure9.1CRITICAL
Denial of Service Vulnerability in Vendure Headless Commerce Platform
CVE-2026-63460
VendurehqVendure7.5HIGH

30 July 2026

Cross-Channel Authorization Bypass in Vendure by VendureHQ
CVE-2026-67347
VendurehqVendure👾🟡6.1MEDIUM

21 April 2026

Unauthenticated SQL Injection Vulnerability in Vendure Open-source Commerce Platform
CVE-2026-40887
VendurehqVendure9.1CRITICAL

30 January 2026

Timing Attack Vulnerability in Vendure Open-Source Commerce Platform
CVE-2026-25050
VendurehqVendure👾🟡2.7LOW