commerce_events vulnerabilities

CVEs whose affected-version data names the commerce_events package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48356Critical· 9.3CISA KEVPoC

3mo ago

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the vict…

▾ HadalAdobe · Adobe CommerceEPSS 31%via CVEORG