| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2025-10-21 | 1.6 kB | |
| Security Release v6.7.3.1 source code.tar.gz | 2025-10-21 | 11.6 MB | |
| Security Release v6.7.3.1 source code.zip | 2025-10-21 | 19.2 MB | |
| Totals: 3 Items | 30.8 MB | 4 | |
See the UPGRADE.md for all important technical changes.
- GHSA-m895-2hj3-8cg9 - fix: Reading media entities by aggregating fields individually bypasses MediaVisibilityRestrictionSubscriber
- GHSA-27c9-vp3w-6ww8 - fix: Exposure of sensitive user information via CSV export mapping
- GHSA-3cpp-fv95-mpr5 - fix: Server-Side Request Forgery (SSRF) - order invoice
- GHSA-6wh5-mw9h-5c3w - fix: Path traversal via Plugin upload
- GHSA-r2vg-hvjm-fg38 - fix: Customer Orders can be canceled, even if refunds are disabled
- [#12576] - getAllCodes returns only string array
- [#12075] - Admin es search for "document number" doesn't return any results
- [#12363] - missing product rule filter
- [#12472] - cast XML config values for Length constraint to int to prevent type errors
- [#12489] - deletion of active customer address
- [#12979] - compatibility with OpenSearch 3.x