Security Advisories - shopware/storefront - Packagist

shopware/storefront Security Advisories for 6.4.8.1 (2)

HTTP caching is marking private HTTP headers as public in Shopware

CVE-2022-24747

Affected version: <=6.4.8.1

Reported by:
GitHub
Shopware guest session is shared between customers

CVE-2022-24745

Affected version: <=6.4.8.1

Reported by:
GitHub