Libraries tagged by magento2 patches

The PolyshellPatch module mitigates the PolyShell vulnerability (APSB25-94) — an unrestricted file upload in the Magento REST API that allows attackers to upload executable files via cart item custom option file uploads.

Go to Download

Composer meta-package that applies critical and isolated security patches for Magento 2 / Adobe Commerce, released by Adobe

Go to Download

A Magento 2 module that mitigates the StyleSmuggler remote code execution vulnerability

Go to Download

Converts Magento's Quality Patches to a JSON format to be used with vaimo/composer-patches

Go to Download

A dev-friendly approach to quickly create migrations (patch data) on Magento 2

Go to Download

Patches for core Magento2

Go to Download

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

Go to Download

A collection of patches for core Magento2

Go to Download

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one.

Go to Download

Composer plugin for automatic Magento quality patches installation

Go to Download

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download

Patches to enable and optimize Back/Forward Cache (BFCache) support in Magento 2

Go to Download

Magento 2 security modules for Qoliber open source patches and fixes.

Go to Download

Magento 2 framework for removing the database footprint (tables, columns, indexes, EAV attributes, config, ACL rules, patch history) a module leaves behind after it is uninstalled.

Go to Download

Patches Magento 2 to accept MariaDB 10.x and 11.x by adding the required version patterns to SqlVersionProvider.

Go to Download