Libraries tagged by magento2 patches

Patch for lib-icu inconsistency returning different locale pattern

Go to Download

Fix the JWT authentication vulnerability on certain Magento 2 versions. Deny tokens issued by old encryption key. If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download

Adobe's official APSB26-146 (CVE-2026-75650) fix for Mage-OS stores on the Magento 2.4.9 equivalent line, via cweagans/composer-patches. Patch content is Adobe's, not MIT.

Go to Download

Patches Varnish 4 VCL by adding cache purge via browser by Ctrl+F5.

Go to Download

Magento 2 security auditing warns when you are behind on Adobe security releases and scans for injected skimmers.

Go to Download

Magento 2 REST API for the OpenAI Agentic Commerce Protocol (ACP). Implements the ACP feed API surface: feeds, paginated products with configurable variants, and SalesRule-sourced promotions. Bearer-token authenticated, DB-persisted feeds, PATCH-as-POST bridge for Magento compatibility.

Go to Download

Applies hot fixes to vendor composer packages for when forking is not possible like in Magento 2

Go to Download

Hot fixes for core bugs and issues in Magento 2

Go to Download

Simple Magento 2.4.7 patch for ACP2E-3130

Go to Download

MageSuite Patchset For Magento Core

Go to Download

Admin panel GUI for reporting status of Magento Quality Patches

Go to Download

A Composer plugin that manages the application of patches from magento/quality-patches

Go to Download

A magento extension to maintain data patches

Go to Download

Helps you to find files in custom themes, custom modules or local overwrites that also might need to be patched manually

Go to Download

Builds and synchronizes remote Magento Composer patches.

Go to Download