https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T14:13:54.684843+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-32716 CVE-2021-32716 — Internal hidden fields are visible on to many associations in admin api 2026-10-06T14:13:54.686512+00:00

Affected: shopware platform

Shopware is an open source eCommerce platform. In versions prior to 6.4.1.1 the admin api has exposed some internal hidden fields when an association has been loaded with a to many reference. Users are recommend to update to version 6.4.1.1. You can get the update to 6.4.1.1 regularly via the Auto-Updater or directly via the download overview. For older versions of 6.1, 6.2, and 6.3, corresponding security measures are also available via a plugin.