Libraries tagged by security patch

Composer meta-package that applies critical and isolated security patches for Magento 2 / Adobe Commerce, released by Adobe

Go to Download

Provides security patches for out-of-date Craft CMS installs

Go to Download

Applies Magento 2 / Adobe Commerce security patches, verifies they stay applied, and fails loudly when they do not

Go to Download

PatchMan Licensing integration for the MyAdmin control panel. Provides license provisioning, activation, deactivation, and IP management for PatchMan security scanning services.

Go to Download

Patch for CVE-2025-54236(a.k.a Session Reaper) which allows customer account takeover and RCE under certain conditions. This patch is actually a Magento 2 extension and universal compatible for Magento 2.3 & 2.4. If you cannot upgrade Magento or cannot apply the official hotfix, try this one.

Go to Download

Applies Adobe's official APSB26-146 (CVE-2026-75650) StyleSmuggler fix to Magento Open Source and Mage-OS automatically, detecting your version. No cweagans/composer-patches or enable-patching needed.

Go to Download

Multi-language dependency vulnerability scanner and patcher: audits every ecosystem in a project tree, collects GitHub's view of its vulnerabilities into a local database, applies fixes to the manifests and closes issues proven fixed.

Go to Download

Leaf CSRF security patch for leaf anchor

Go to Download

Central Composer Patches resolver for Magento security patches.

Go to Download

Checks and syncs Adobe's isolated security patches for a Magento store.

Go to Download

Adobe's isolated and out-of-band security patches for Magento Open Source, Adobe Commerce and B2B, taken unmodified from Adobe's patch registry and applied by disrex/magento-patch-installer

Go to Download

Applies Magento 2 / Adobe Commerce security patches, verifies they stay applied, and fails loudly when they do not

Go to Download

Applies Adobe's official Magento Open Source security patches automatically on composer install and update.

Go to Download

Composer commands to add Magento 2 security, quality and custom patches safely: per-package split, edition/version aware, idempotent, validated before anything is written. Applies via cweagans/composer-patches 2.x.

Go to Download

An alternative solution(as a Magento 2 extension) to fix the XXE vulnerability CVE-2024-34102(aka Cosmic Sting). If you cannot upgrade Magento or cannot apply the official patch, try this one.

Go to Download