{"action":"Upgrade shopware/platform to 6.5.7.4 or later.","affected":[{"fixed":"6.5.7.4","introduced":"0"}],"component":"shopware/platform","cve_ids":["CVE-2024-22406"],"ecosystem":"Packagist","epss":0.0064,"exploited":false,"fixed_versions":["6.5.7.4"],"ghsa_id":"GHSA-qmp9-2xwj-m6m9","id":"tcs_01M5KF7EA9WQCGEKY5SGTPY4DA","modified_at":"2026-09-10T03:50:05.016879972Z","published_at":"2024-01-17T20:28:50Z","references":["https://osv.dev/vulnerability/GHSA-qmp9-2xwj-m6m9","https://github.com/shopware/shopware/security/advisories/GHSA-qmp9-2xwj-m6m9","https://nvd.nist.gov/vuln/detail/CVE-2024-22406","https://github.com/shopware/core/commit/e2256ec81e56f792623e90d89786d8a9fcad28bf","https://github.com/shopware/shopware/commit/5005213e609f5a4423fcfa92f105c3de8ab35100","https://github.com/shopware/shopware","https://github.com/shopware/shopware/releases/tag/v6.5.7.4"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-qmp9-2xwj-m6m9#Packagist/shopware/platform","url":"https://osv.dev/vulnerability/GHSA-qmp9-2xwj-m6m9"}],"summary":"Blind SQL injection in shopware"}