CVE-2026-47740

Packagist/shopper/framework CVE-2026-47740: high 8.1, EPSS 0.36%

shopper/framework: Authorization bypass in multiple Livewire admin components

Action: Upgrade shopper/framework to 2.8.0 or later.

composer require shopper/framework:2.8.0

Affected

Fixed versions

Sources

• osv: GHSA-f946-9qp6-vgch
• https://github.com/shopperlabs/shopper/security/advisories/GHSA-f946-9qp6-vgch
• https://nvd.nist.gov/vuln/detail/CVE-2026-47740
• https://github.com/shopperlabs/shopper/issues/510
• https://github.com/shopperlabs/shopper/pull/511
• https://github.com/shopperlabs/shopper/commit/fcd0c5920588702df5b874f432b1042abd77a50b
• https://github.com/shopperlabs/shopper
• https://github.com/shopperlabs/shopper/releases/tag/v2.8.0

CVE-2026-47740 · published 2026-05-18T16:34:23Z · modified 2026-09-10T03:50:46.837006293Z · JSON