shopper/framework vulnerabilities
CVEs whose affected-version data names the shopper/framework package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-56826Medium· 5.4PoCShopper is a Headless e-commerce Admin Panel
Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invoke destructive actions through the Livewire endpoint because package…
▾ Twilightshopper · shopper/frameworkEPSS 0.34%via NVD
CVE-2026-56828High· 8.8Shopper: privilege escalation via improper Livewire admin component authorization
Shopper: privilege escalation via improper Livewire admin component authorization
▾ Twilightshopper · shopper/frameworkvia GHSA