MA
Product
magento-lts
by OpenMage · last CVE May 15, 2026
9
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch

Add magento-lts to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40488
8.8
1%
Apr 20
OpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code Execution
Affected: < 20.17.0
CVE-2026-25524
8.1
1%
Apr 20
OpenMage LTS's Phar Deserialization leads to Remote Code Execution
Affected: < 20.17.0
Showing 2