Skip to content
OpenAdvisories

Package · Packagist

shopper/framework

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-47744

    Shopper: Authorization bypass and RBAC privilege escalation in team settings

    Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC system. Settings/Team/Index had no mount() authorization. Any authenticated user c…

    shopperlabs shopper shopper/framework Packagist