https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 01:36:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-199947 EUVD-2026-199947 https://cve.radiocsirt.org/vuln/euvd-2026-199947 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34098 <p>Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript could be read in production environments (`themes/package-lock.json`). With this information, the specific Shopware version in a deployment might be determined by an attacker, which could be used for further attacks. Users are advised to update to version 5.7.18. There are no known workarounds for this vulnerability.</p> <p>Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript could be read in production environments (`themes/package-lock.json`). With this information, the specific Shopware version in a deployment might be determined by an attacker, which could be used for further attacks. Users are advised to update to version 5.7.18. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34098 https://cve.radiocsirt.org/vuln/ghsa-q97c-2mh3-pgw9 <p><strong>Affected:</strong> Packagist: shopware/shopware</p> <p>### Impact Due to a wrong configuration in the `.htaccess` file, the configuration file of Javascript dependencies could be read in production environments (`themes/package-lock.json`). With this information, the used Shopware version might be determined by an attacker, which could be used for further attacks.</p> <p>### Patches We recommend updating to the current version 5.7.18. You can get the update to 5.7.18 regularly via the Auto-Updater or directly via the release page. https://github.com/shopware5/shopware/releases/tag/v5.7.18</p> <p>For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html</p> <p>### References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-06-2023</p> <p><strong>Affected:</strong> Packagist: shopware/shopware</p> <p>### Impact Due to a wrong configuration in the `.htaccess` file, the configuration file of Javascript dependencies could be read in production environments (`themes/package-lock.json`). With this information, the used Shopware version might be determined by an attacker, which could be used for further attacks.</p> <p>### Patches We recommend updating to the current version 5.7.18. You can get the update to 5.7.18 regularly via the Auto-Updater or directly via the release page. https://github.com/shopware5/shopware/releases/tag/v5.7.18</p> <p>For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html</p> <p>### References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-06-2023</p> https://cve.radiocsirt.org/vuln/ghsa-q97c-2mh3-pgw9 https://cve.radiocsirt.org/vuln/gsd-2023-34098 gsd-2023-34098 https://cve.radiocsirt.org/vuln/gsd-2023-34098