HIGH7.1Packagist
GHSA-6w82-v552-wjw2· CVE-2025-67648Shopware Storefront Reflected XSS in Storefront Login Page
Modified: 9/10/2026
package
Packagist/shopware/storefront
pkg:packagist/shopware/storefront
MEDIUM6.3Packagist
GHSA-6wrh-279j-6hvw· CVE-2022-24747HTTP caching is marking private HTTP headers as public in Shopware
Modified: 2/16/2024
MEDIUM6.1Packagist
GHSA-952p-fqcp-g8pc· CVE-2022-24746HTML injection possibility in voucher code form in Shopware
Modified: 11/8/2023
HIGH7.5Packagist
GHSA-c2f9-4jmm-v45m· CVE-2024-27917Shopware's session is persistent in Cache for 404 pages
Modified: 2/22/2026
MEDIUM4.8Packagist
GHSA-jp6h-mxhx-pgqh· CVE-2022-24745Shopware guest session is shared between customers
Modified: 11/8/2023