- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 1 high, 1 medium
- Registry
- Packagist
Advisories 2
- CVE-2024-38516High 8.8
Aimeos HTML client may potentially reveal sensitive information in error log
Affected: from 2024.04.1, fixed in 2024.04.7; from 2023.04.1, fixed in 2023.10.15; from 2022.04.1, fixed in 2022.10.13; from 2021.10.1, fixed in 2021.10.22.
- CVE-2024-37296Medium 5.3
Aimeos HTML client vulnerable to digital products download without proper payment status check
Affected: from 2024.04.1, fixed in 2024.04.5; from 2023.04.1, fixed in 2023.10.14; from 2022.04.1, fixed in 2022.10.12; from 2021.04.1, fixed in 2021.10.21; from 2020.04.1, fixed in 2020.10.27.