⤷ Title: Critical 9.1 SQL Injection Threatens Vendure Core Stores
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:06:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@vendure/core #CVSS 9.1 #cybersecurity #e_commerce security #infosec #mysql #Patch Alert #PostgreSQL #Shop API #sql injection #sqli #Vendure
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 15 Apr 2026 13:06:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #@vendure/core #CVSS 9.1 #cybersecurity #e_commerce security #infosec #mysql #Patch Alert #PostgreSQL #Shop API #sql injection #sqli #Vendure
Daily CyberSecurity
Critical 9.1 SQL Injection Threatens Vendure Core Stores
Vendure Core faces a critical 9.1 SQL Injection via the Shop API. Unauthenticated attackers can hijack databases—upgrade to 3.6.2, 3.5.7, or 2.3.4 now!