Swag vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Swag products: 1 record(s), with severity, exploitation and fixes.

Platform-security 1

Exploited only (KEV) →

CVE-2026-32100 Medium · 5.3 CWE-200 Mar 12, 2026

swag/platform-security: `/api/_info/config` route exposes information about licenses and active security fixes

Shopware is an open commerce platform. /api/_info/config route exposes information about active security fixes. This vulnerability is fixed in 2.0.16, 3.0.12, and 4.0.7.