MEDIUM4.9Packagist
GHSA-ch7p-mpv4-4vg4· CVE-2026-22242CoreShop Vulnerable to SQL Injection via Admin Reports
Modified: 2/3/2026
package
Packagist/coreshop/core-shop
pkg:packagist/coreshop/core-shop
MEDIUMPackagist
GHSA-fqcv-8859-86x2· CVE-2026-23959CoreShop Vulnerable to SQL Injection via Admin customer-company-modifier
Modified: 2/3/2026
HIGH8.2Packagist
GHSA-q58j-g3f4-h26h· CVE-2026-41249CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
Modified: 9/10/2026