Nixpkgs security tracker
Dismissed
by @mweinelt Activity log
- Created suggestion
-
@mweinelt
ignored
8 packages
- python312Packages.azure-mgmt-commerce
- python313Packages.azure-mgmt-commerce
- python314Packages.azure-mgmt-commerce
- python312Packages.mypy-boto3-marketplacecommerceanalytics
- python313Packages.mypy-boto3-marketplacecommerceanalytics
- python314Packages.mypy-boto3-marketplacecommerceanalytics
- python312Packages.types-aiobotocore-marketplacecommerceanalytics
- python313Packages.types-aiobotocore-marketplacecommerceanalytics
- @mweinelt dismissed
Craft Commerce has Stored XSS while updating Order Status from Orders Table
Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a stored XSS vulnerability exists when a user tries to update the Order Status from the Commerce Orders Table. The Order Status Name is rendered without proper escaping, allowing script execution to occur. This vulnerability is fixed in 4.10.2 and 5.5.3.
References
-
https://github.com/craftcms/commerce/security/advisories/GHSA-mqxf-2998-c6cp x_refsource_CONFIRM
Affected products
commerce
- ==>= 4.0.0 < 4.10.2
- ==>= 5.0.0 < 5.5.3
Ignored packages (8)
pkgs.python312Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python313Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python314Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python312Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python313Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python314Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
pkgs.python312Packages.types-aiobotocore-marketplacecommerceanalytics
Type annotations for aiobotocore marketplacecommerceanalytics