Vendure
1 CVEs
product
Monthly
Vendure versions up to 3.5.3 contains a vulnerability that allows attackers to enumerate valid usernames (email addresses) (CVSS 5.3).
Information Disclosure
Vendure
NVD
GitHub
CVSS 3.1
5.3
EPSS
0.0%
CVE-2026-25050
EPSS 0%
CVSS 5.3
MEDIUM
PATCH
This Month
Vendure versions up to 3.5.3 contains a vulnerability that allows attackers to enumerate valid usernames (email addresses) (CVSS 5.3).
Information Disclosure
Vendure
NVD
GitHub