https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T15:55:49.840389+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-227806 EUVD-2026-227806 2026-10-17T15:55:49.900103+00:00 EUVD-2026-227806 https://cve.radiocsirt.org/vuln/fkie_cve-2025-30151 fkie_cve-2025-30151 2026-10-17T15:55:49.900145+00:00

Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.

 https://cve.radiocsirt.org/vuln/ghsa-cgfj-hj93-rmh2 GHSA-cgfj-hj93-rmh2 — Shopware allows Denial Of Service via password length 2026-10-17T15:55:49.900179+00:00

Affected: Packagist: shopware/core, Packagist: shopware/platform

### Impact

It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API.

### Patches Update to Shopware 6.6.10.3 or 6.5.8.17

### Workarounds For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version.