GHSA-mwvm-68w4-32gq

Facts

Severity

Medium · CVSS score 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected versions (swag/paypal)

< 10.8.0As entered by the maintainer. Not reviewed.

Fixed in (swag/paypal)

10.8.1

Affected versions (store.shopware.com/swagpaypal)

< 10.8.0As entered by the maintainer. Not reviewed.

Fixed in (store.shopware.com/swagpaypal)

10.8.1

Affected versions (swag/paypal)

< 9.13.0As entered by the maintainer. Not reviewed.

Fixed in (swag/paypal)

9.13.1

Affected versions (store.shopware.com/swagpaypal)

< 9.13.0As entered by the maintainer. Not reviewed.

Fixed in (store.shopware.com/swagpaypal)

9.13.1

Affected versions (swag/paypal)

< 8.12.0As entered by the maintainer. Not reviewed.

Fixed in (swag/paypal)

8.12.1

Affected versions (store.shopware.com/swagpaypal)

< 8.12.0As entered by the maintainer. Not reviewed.

Fixed in (store.shopware.com/swagpaypal)

8.12.1

CVE

None cited by the advisory

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-08-27 11:40 UTC

   Published by the maintainers

   No CVE cited

2. 2026-10-28 08:44 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-mwvm-68w4-32gq.json