Packagist/shopware/storefront — 5 CVEs

HIGH7.5CVE-2024-27917Shopware's session is persistent in Cache for 404 pages

>= 6.5.8.0, < 6.5.8.7

HIGH7.1CVE-2025-67648Shopware Storefront Reflected XSS in Storefront Login Page

>= 6.4.6.0, < 6.6.10.10

MEDIUM6.3CVE-2022-24747HTTP caching is marking private HTTP headers as public in Shopware

from 0, < 6.4.8.2

MEDIUM6.1HTML injection possibility in voucher code form in Shopware

from 0, < 6.4.8.1

MEDIUM4.8Shopware guest session is shared between customers

from 0, < 6.4.8.2

pkg:Packagist/shopware/storefront