GHSA-595p-g7xc-c333
NoneCVSS
—
EPSS
—
Published
Jan 14, 2026
CISA due date
—
The record
Algolia Search & Discovery for Magento 2 Has Untrusted Data Handling
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Packagist | algolia/algoliasearch-magento-2 | 0 | 3.16.2 |
| Packagist | algolia/algoliasearch-magento-2 | 3.17.0-beta.1 | 3.17.2 |
| packagist | algolia/algoliasearch-magento-2 | 3.17.0-beta.1 | 3.17.2 |
Related vulnerabilities
- CVE-2026-114577 A vulnerability was found in oretnom23 php-travel-agency-system. CWE-74
- CVE-2026-114575 A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. CWE-74
- CVE-2026-112150 A security flaw has been discovered in vraj404 Criminal-Management-System up to… CWE-74
- CVE-2026-112141 A vulnerability was determined in satya-vinay Events-Management-System up to… CWE-74
- CVE-2026-112100 A vulnerability was determined in DeepPavlov up to 1.7.0. CWE-74
- CVE-2026-112087 A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. CWE-74
- CVE-2026-111991 A security vulnerability has been detected in WongKinYiu yolov9 0.1. CWE-74
- CVE-2026-111986 A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. CWE-74