Skip to content
OpenAdvisories

Vendor

TrueLayer

2 known vulnerabilities.

Products

TrueLayer Magento 2 Plugin 1 truelayer-dotnet 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-103831

    Insecure deserialization in the TrueLayer Magento 2 plugin

    CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize() function without restrictions on the classes allowed when retrieving data stored in the …

    TrueLayer TrueLayer Magento 2 Plugin Web / CMS
  • High 8.6
    CVE-2024-23838

    TrueLayer.Client SSRF when fetching payment or payment provider

    TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on…

    TrueLayer truelayer-dotnet TrueLayer.Client NuGet