Visit our security reporting form to report security vulnerabilities and to take part in our bug bounty program.
Security: shopware/SwagPayPal
Security
SECURITY.md
-
Injection of existing paypalOrderId into different orders allows transaction status modificationGHSA-mwvm-68w4-32gq published
Aug 27, 2026 by mstegmeyerModerate -
Payment information sent to PayPal not necessarily identical to created orderGHSA-vxpm-8hcp-qh27 published
Feb 2, 2023 by mstegmeyerHigh
Learn more about advisories related to shopware/SwagPayPal in the GitHub Advisory Database