CVE-2025-7954
No fix known EPSS <1%CVSS 6.0
A race condition vulnerability has been identified in Shopware's voucher system of Shopware v6.6.10.4 that allows attackers to bypass intended voucher restrictions and exceed usage limitations.
Products: shopware
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | shopware/platform | no fix |