npm/@vendure/core: medium 5.3
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Action: Upgrade @vendure/core to 2.1.3 or later.
npm i @vendure/core@2.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.3 | - |
Fixed versions
| 2.1.3 |
Sources
- osv: GHSA-wm63-7627-ch33
- https://github.com/vendure-ecommerce/vendure/security/advisories/GHSA-wm63-7627-ch33
- https://github.com/vendure-ecommerce/vendure/commit/5e506fd8ba9f7e20030c329e62af1140d906121f
- https://github.com/vendure-ecommerce/vendure
published · modified · JSON