← All credits

colinmollenhour

19 vulnerability records and advisories credit this contributor.

CVE-2026-128030

OpenMage magento-lts before 20.18.2 Insufficient Session Expiration After API User Deactivation

CVE-2026-128031

OpenMage magento-lts before 20.18.2 Incorrect Authorization in Admin Controllers ACL

CVE-2026-128040

OpenMage magento-lts before 20.18.2 Stored XSS via Admin Dataflow, Tax, OAuth, PayPal Fields

CVE-2026-128041

OpenMage magento-lts before 20.18.2 Stored XSS via RSS Review Feed

CVE-2026-128044

OpenMage magento-lts before 20.18.2 OAuth Callback URL Allowlist Bypass

CVE-2026-128045

OpenMage Magento-LTS before 20.18.2 Authorization Bypass via Forgeable RSS Order Key

CVE-2026-128048

OpenMage magento-lts before 20.18.2 Information Disclosure via Email Template getConfig

CVE-2026-128049

OpenMage Magento LTS before 20.18.2 CSRF via OAuth Authorization Confirm

CVE-2026-128053

OpenMage magento-lts before 20.18.2 Reflected XSS via Error Pages SCRIPT_NAME