{"action":"Upgrade shopper/framework to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"shopper/framework","cve_ids":["CVE-2026-47740"],"ecosystem":"Packagist","epss":0.00258,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-f946-9qp6-vgch","id":"tcs_01M5KF1MN5X2X453Q7TGWXE6SR","modified_at":"2026-09-10T03:50:46.837006293Z","published_at":"2026-05-18T16:34:23Z","references":["https://osv.dev/vulnerability/GHSA-f946-9qp6-vgch","https://github.com/shopperlabs/shopper/security/advisories/GHSA-f946-9qp6-vgch","https://nvd.nist.gov/vuln/detail/CVE-2026-47740","https://github.com/shopperlabs/shopper/issues/510","https://github.com/shopperlabs/shopper/pull/511","https://github.com/shopperlabs/shopper/commit/fcd0c5920588702df5b874f432b1042abd77a50b","https://github.com/shopperlabs/shopper","https://github.com/shopperlabs/shopper/releases/tag/v2.8.0"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f946-9qp6-vgch","url":"https://osv.dev/vulnerability/GHSA-f946-9qp6-vgch"}],"summary":"shopper/framework: Authorization bypass in multiple Livewire admin components"}