https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T02:20:03.534147+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-101205 cnvd-2021-101205 2026-10-15T02:20:03.604396+00:00 cnvd-2021-101205 https://cve.radiocsirt.org/vuln/euvd-2026-28169 EUVD-2026-28169 2026-10-15T02:20:03.604433+00:00 EUVD-2026-28169 https://cve.radiocsirt.org/vuln/fkie_cve-2021-32759 fkie_cve-2021-32759 2026-10-15T02:20:03.604447+00:00

OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions 19.4.15 and 20.0.13 have a patch for this Issue.

 https://cve.radiocsirt.org/vuln/ghsa-xm9f-vxmx-4m58 GHSA-xm9f-vxmx-4m58 — Data Flow Sanitation Issue Fix 2026-10-15T02:20:03.604478+00:00

Affected: Packagist: openmage/magento-lts

### Impact Due to missing sanitation in data flow it was possible for admin users to upload arbitrary executable files to the server.

 https://cve.radiocsirt.org/vuln/gsd-2021-32759 gsd-2021-32759 2026-10-15T02:20:03.604502+00:00 gsd-2021-32759