Skip to content
OpenAdvisories

Vendor

OpenMage

27 known vulnerabilities.

Products

magento-lts 27
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-42155

    Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived Inputs

    Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, the XML-RPC / SOAP API session ID is generat…

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • Critical 9.1
    CVE-2021-21427

    Backport for CVE-2021-21024 Blind SQLi from Magento 2

    Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021…

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist
  • Critical 9.8
    CVE-2021-21426

    Fixes a bug in Zend Framework's Stream HTTP Wrapper

    Magento-lts is a long-term support alternative to Magento Community Edition (CE). In magento-lts versions 19.4.12 and prior and 20.0.8 and prior, there is a vulnerability caused by the unsecured deserialization of an object. A patch in versions 19.4.13 and 20…

    OpenMage magento-lts openmage/magento-lts Web / CMS Packagist