wubinworks/module-xml-security
A replacement of `\Magento\Framework\Xml\Security` for Magento 2 with enhanced security.
时间:2024-12-23 13:34
wubinworks/module-jwt-auth-patch
Fix the JWT authentication vulnerability on certain Magento 2 versions. Deny tokens issued by old encryption key. If you cannot upgrade Magento or cannot apply the official patch, try this one.
时间:2024-12-10 05:54
wubinworks/module-encryption-key-manager-cli
A utility for Magento 2 encryption key rotation and management. CVE-2024-34102(aka Cosmic Sting) victims can use it as an aftercare.
时间:2024-12-04 16:08
wubinworks/module-cosmic-sting-patch
An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.
时间:2024-08-08 08:43