CVE-2026-41249
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.2 / 10
Vulnerability Description
CoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration
Vulnerability Details
Published Date
Last Modified
Source
GitHub
Vendor
composer
Product
coreshop/core-shop
Discussion (0)
Add Comment
No comments yet. Be the first!