Most recent entries from all

EUVD-2026-265768

fkie_cve-2026-23498

Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP Closure not checked being against allow list for the map(...) override. This vulnerability is fixed in 6.7.6.1.

GHSA-7cw6-7h3h-v8pf — Shopware Has Improper Control of Generation of Code in Twig rendered views

Affected: Packagist: shopware/shopware, Packagist: shopware/core

### Impact We fixed with [CVE-2023-2017](https://github.com/advisories/GHSA-7v2v-9rm4-7m8f) Twig filters to only be executed with allowed functions. However there was a regression that lead to an array and array crafted PHP Closure not checked being against allow list for the map(...) override

### Patches Patched in 6.7.6.1

### Workarounds Install the security plugin