https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T03:22:42.688894+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-34098 CVE-2023-34098 — Dependency configuration exposed in Shopware 2026-10-22T03:22:42.690456+00:00

Affected: shopware

Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript could be read in production environments (`themes/package-lock.json`). With this information, the specific Shopware version in a deployment might be determined by an attacker, which could be used for further attacks. Users are advised to update to version 5.7.18. There are no known workarounds for this vulnerability.