https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T08:48:10.236970+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-03217 cnvd-2022-03217 2026-10-15T08:48:10.240237+00:00 cnvd-2022-03217 https://cve.radiocsirt.org/vuln/euvd-2026-234537 EUVD-2026-234537 2026-10-15T08:48:10.240267+00:00 EUVD-2026-234537 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21651 fkie_cve-2022-21651 2026-10-15T08:48:10.240282+00:00

Shopware is an open source e-commerce software platform. An open redirect vulnerability has been discovered. Users may be arbitrary redirected due to incomplete URL handling in the shopware router. This issue has been resolved in version 5.7.7. There is no workaround and users are advised to upgrade as soon as possible.

 https://cve.radiocsirt.org/vuln/ghsa-c53v-qmrx-93hg GHSA-c53v-qmrx-93hg — Open redirect in shopware 2026-10-15T08:48:10.240311+00:00

Affected: Packagist: shopware/shopware

### Impact

Arbitrary redirect while using certain URLs

### Patches

We recommend updating to the current version 5.7.7. You can get the update to 5.7.7 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

### References

https://docs.shopware.com/en/shopware-5-en/securityupdates/security-update-01-2022

 https://cve.radiocsirt.org/vuln/gsd-2022-21651 gsd-2022-21651 2026-10-15T08:48:10.240339+00:00 gsd-2022-21651