CVE-2026-54159
1 advisory.
Packagist/prestashop/ps_facetedsearch CVE-2026-54159: critical 10, EPSS 0.75%
prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
Action: Upgrade prestashop/ps_facetedsearch to 4.0.4 or later.
composer require prestashop/ps_facetedsearch:4.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 4.0.4 | - |
Fixed versions
| 4.0.4 |
Sources
- osv: GHSA-m5f5-28qr-9g9r
- https://github.com/PrestaShop/ps_facetedsearch/security/advisories/GHSA-m5f5-28qr-9g9r
- https://github.com/PrestaShop/ps_facetedsearch
CVE-2026-54159 · published · modified · JSON