# magento/product-community-edition (Packagist) vulnerabilities 4 known vulnerabilities, with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://packagist.org/packages/magento/product-community-edition ## Advisories (4) ### [CVE-2019-8121](https://cve.now/CVE-2019-8121): An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. - Severity: Unrated - Published: Nov 5, 2019 - Affected: from 2.2, fixed in 2.2.10; from 2.3, fixed in 2.3.2-p2. ### [CVE-2019-7938](https://cve.now/CVE-2019-7938): A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior… - Severity: Unrated - Published: Aug 2, 2019 - Affected: from 2.1, fixed in 2.1.18; from 2.2, fixed in 2.2.9; from 2.3, fixed in 2.3.2. ### [CVE-2019-7876](https://cve.now/CVE-2019-7876): A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. - Severity: Unrated - Published: Aug 2, 2019 - Affected: from 2.1, fixed in 2.1.18; from 2.2, fixed in 2.2.9; from 2.3, fixed in 2.3.2. ### [CVE-2019-7865](https://cve.now/CVE-2019-7865): A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to… - Severity: Unrated - Published: Aug 2, 2019 - Affected: from 2.1, fixed in 2.1.18; from 2.2, fixed in 2.2.9; from 2.3, fixed in 2.3.2. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/packagist/magento/product-community-edition Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.