{"action":"Upgrade shopper/framework to 2.8.0 or later.","affected":[{"fixed":"2.8.0","introduced":"0"}],"component":"shopper/framework","cve_ids":["CVE-2026-47743"],"ecosystem":"Packagist","epss":0.00384,"exploited":false,"fixed_versions":["2.8.0"],"ghsa_id":"GHSA-hr9v-r8r2-hg7j","id":"tcs_01M5KF3X4Y9G40S2VVRQ7EMVK3","modified_at":"2026-09-10T03:50:49.885563140Z","published_at":"2026-06-05T20:35:14Z","references":["https://osv.dev/vulnerability/GHSA-hr9v-r8r2-hg7j","https://github.com/shopperlabs/shopper/security/advisories/GHSA-hr9v-r8r2-hg7j","https://github.com/shopperlabs/shopper/pull/511","https://github.com/shopperlabs/shopper"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-hr9v-r8r2-hg7j","url":"https://osv.dev/vulnerability/GHSA-hr9v-r8r2-hg7j"}],"summary":"Shopper: Multiple data integrity and disclosure issues in admin Livewire components"}