https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:27:21.432314+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265768 EUVD-2026-265768 2026-10-07T02:27:21.479849+00:00 EUVD-2026-265768 https://cve.radiocsirt.org/vuln/fkie_cve-2026-23498 fkie_cve-2026-23498 2026-10-07T02:27:21.479888+00:00

Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map(...) override. This vulnerability is fixed in 6.7.6.1.

 https://cve.radiocsirt.org/vuln/ghsa-7cw6-7h3h-v8pf GHSA-7cw6-7h3h-v8pf — Shopware Has Improper Control of Generation of Code in Twig rendered views 2026-10-07T02:27:21.479921+00:00

Affected: Packagist: shopware/shopware, Packagist: shopware/core

### Impact We fixed with [CVE-2023-2017](https://github.com/advisories/GHSA-7v2v-9rm4-7m8f) Twig filters to only be executed with allowed functions. However there was a regression that lead to an array and array crafted PHP Closure not checked being against allow list for the map(...) override

### Patches Patched in 6.7.6.1

### Workarounds Install the security plugin