Data

Tools

Indexes

Applications

Experiments

Open Collective

An open API service for software projects hosted on Open Collective.

github.com/vendurehq/vendure

Customizable Commerce Platform Built for Scale
https://github.com/vendurehq/vendure

Critical
GSA_kwCzR0hTQS1yOW1xLTNjOXItZm1qcc4ABARd
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
Ecosystems: npm
Packages: @vendure/asset-server-plugin
Source: github
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS13bTYzLTc2MjctY2gzM84AA3P1
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Ecosystems: npm
Packages: @vendure/core
Source: github
Published: almost 3 years ago
Low
GSA_kwCzR0hTQS1oOXdxLXhjcXgtbXF4bc4AA0m0
Vendure Cross Site Request Forgery vulnerability impacting all API requests
Ecosystems: npm
Packages: @vendure/core
Source: github
Published: about 3 years ago
Moderate
GSA_kwCzR0hTQS1nbTY4LTU3MnAtcTI4cs4AA0Q9
@vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability
Ecosystems: npm
Packages: @vendure/admin-ui-plugin
Source: github
Published: about 3 years ago