MEDIUM6.1npm
GHSA-2xcj-557c-hf8r· CVE-2023-46495Cross-site Scripting in evershop
Modified: 12/13/2023
package
npm/@evershop/evershop
pkg:npm/%40evershop/evershop
HIGH7.4npm
GHSA-32r3-57hp-cgfw· CVE-2023-46943EverShop at risk to unauthorized access via weak HMAC secret
Modified: 11/18/2024
MEDIUM5.3npm
GHSA-4wrm-qmq2-5fjx· CVE-2023-46493Directory Traversal in evershop
Modified: 12/13/2023
CRITICAL9.8npm
GHSA-5mmr-9qx3-3pf9· CVE-2023-46498Code execution in evershop
Modified: 12/13/2023
MEDIUM5.4npm
GHSA-7443-5962-wp4r· CVE-2023-46497Directory Traversal in evershop
Modified: 12/13/2023
LOW3.7npm
GHSA-c73g-mx2w-cc93· CVE-2025-12919EverShop is vulnerable to Unauthorized Order Information Access (IDOR)
Modified: 12/12/2025
HIGH7.5npm
GHSA-ggpm-9qfx-mhwg· CVE-2023-46942EverShop vulnerable to improper authorization in GraphQL endpoints
Modified: 7/26/2024
MEDIUM6.1npm
GHSA-gjj8-m83c-qv9h· CVE-2023-46499Cross-site Scripting in evershop
Modified: 12/13/2023
HIGH7.5npm
GHSA-m2q5-xhqg-92r2· CVE-2025-67419evershop allows unauthenticated attackers to exhaust application server's resources via "GET /images" API
Modified: 2/3/2026
MEDIUM6.1npm
GHSA-m6vm-ff9v-jp3r· CVE-2023-46494Cross Site Scripting in evershop
Modified: 12/13/2023
HIGH8.3npm
GHSA-rwf3-w4jq-f4cm· CVE-2023-46496Directory Traversal in evershop
Modified: 12/13/2023
MEDIUMnpm
GHSA-vp8w-wj4m-3r7j· CVE-2025-67427evershop allows unauthenticated attackers to force server to initiate HTTP request via "GET /images" API
Modified: 2/3/2026