← All credits

colinmollenhour

19 vulnerability records and advisories credit this contributor.

CVE-2026-128042

OpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits

CVE-2026-128041

OpenMage magento-lts before 20.18.2 Stored XSS via RSS Review Feed

CVE-2026-128040

OpenMage magento-lts before 20.18.2 Stored XSS via Admin Dataflow, Tax, OAuth, PayPal Fields

CVE-2026-128033

OpenMage magento-lts before 20.18.2 Information Disclosure via Order-Status RSS Feed

CVE-2026-128032

OpenMage magento-lts before 20.18.2 Payment Bypass via Free Payment Method

CVE-2026-128031

OpenMage magento-lts before 20.18.2 Incorrect Authorization in Admin Controllers ACL

CVE-2026-128030

OpenMage magento-lts before 20.18.2 Insufficient Session Expiration After API User Deactivation

CVE-2026-128029

OpenMage magento-lts before 20.18.2 Stored XSS via Dataflow Import Row Errors

CVE-2026-128028

OpenMage magento-lts before 20.18.2 Stored XSS via Product Custom Option SVG Upload