Libraries tagged by magento2 patches

The PolyshellPatch module mitigates the PolyShell vulnerability (APSB25-94) — an unrestricted file upload in the Magento REST API that allows attackers to upload executable files via cart item custom option file uploads.

Go to Download

A dev-friendly approach to quickly create migrations (patch data) on Magento 2

Go to Download

Patches for core Magento2

Go to Download

Composer meta-package that applies critical and isolated security patches for Magento 2 / Adobe Commerce, released by Adobe

Go to Download

Converts Magento's Quality Patches to a JSON format to be used with vaimo/composer-patches

Go to Download

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

Go to Download

Composer plugin for automatic Magento quality patches installation

Go to Download

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download

Magento 2 framework for removing the database footprint (tables, columns, indexes, EAV attributes, config, ACL rules, patch history) a module leaves behind after it is uninstalled.

Go to Download

A collection of patches for core Magento2

Go to Download

Magento 2.x patches mirror repository

Go to Download

Magento 2.x patches mirror repository

Go to Download

Magento 2 patch for CVE-2022-24086, CVE-2022-24087. Fix the RCE vulnerability and related bugs by performing deep template variable escaping. If you cannot upgrade Magento or cannot apply the official patches, try this one.

Go to Download

Magento 2.x patches mirror repository

Go to Download

Patches to enable and optimize Back/Forward Cache (BFCache) support in Magento 2

Go to Download