shopware/core

Shopware platform is the core for all Shopware ecommerce products.

Latest v6.7.15.1

88%

Total Score

healthy

Frequent releases, active contributions, and broad ownership outweigh the missing security policy and large dependency surface.

Are you affected? Scan for Free

Health Score Breakdown

Dependency profile

The package declares 124 runtime dependencies, a substantial dependency surface for maintainers and consumers; its broad e-commerce core scope partly explains the size but does not remove the added complexity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected; this is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policy

The repository has no SECURITY.md or other detected security policy, leaving vulnerability reporting and response expectations less explicit.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-808023 shopware/core is vulnerable to SQL Injection in versions 6.4.16.0 - 6.6.10.22 and 6.7.0.0 - 6.7.13.0.	6.4.16.0 - 6.6.10.226.7.0.0 - 6.7.13.0	Critical
AIKIDO-2026-865495 shopware/core is vulnerable to Remote Code Execution (RCE) in versions 6.5.4.0 - 6.6.10.22 and 6.7.0.0 - 6.7.13.0.	6.5.4.0 - 6.6.10.226.7.0.0 - 6.7.13.0	Critical
AIKIDO-2026-289523 shopware/core is vulnerable to Privilege Escalation in versions 6.7.0.0 - 6.7.13.0 and 6.0.0.0 - 6.6.10.22.	6.0.0.0 - 6.6.10.226.7.0.0 - 6.7.13.0	Medium
AIKIDO-2026-371231 shopware/core is vulnerable to Path Traversal in versions 6.7.1.0 - 6.7.13.0.	6.7.1.0 - 6.7.13.0	High
AIKIDO-2026-307307 shopware/core is vulnerable to Weak Password Recovery Mechanism in versions 0.0.0.1 - 6.6.10.22 and 6.7.0.0 - 6.7.13.0.	0.0.0.1 - 6.6.10.226.7.0.0 - 6.7.13.0	Critical