Login Request a demo
SH
Product
shopware
by shopware · last CVE Oct 13, 2026
77
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities77In the news0Timeline
Severity mix
Critical 6High 28Medium 41Low 2
Severity
All severities77Critical6High28Medium41Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add shopware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-42357
9.8
1%
Aug 8
Shopware is an open commerce platform
Affected: before 6.5.8.13; 6.6.0.0 before 6.6.5.1
CVE-2024-42355
9.8
1%
Aug 8
Shopware, an open ecommerce platform, has a new Twig Tag `sw_silent_feature_call` which silences deprecation messages while triggered in this tag
Affected: before 6.5.8.13; 6.6.0.0 before 6.6.5.1
CVE-2024-22406
9.8
1%
Jan 16
Shopware is an open headless commerce platform
Affected: before 6.5.7.4
CVE-2023-22732
9.8
1%
Jan 17
Shopware is an open source commerce platform based on Symfony Framework and Vue js
Affected: before 6.4.18.1
CVE-2021-37708
9.8
2%
Aug 16
Shopware is an open source eCommerce platform
Affected: 6.1.0 before 6.4.3.1
CVE-2016-3109
9.8
28%
Apr 21
The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code
Affected: through 5.1.4
Showing 6