{"id":"ROOT-APP-COMPOSER-CVE-2026-92909","summary":"CVE-2026-92909 in magento/product-enterprise-edition - Patched by Root","details":"Root has patched CVE-2026-92909 in the magento/product-enterprise-edition package for Root:Composer. Multiple fixed versions available.","modified":"2026-10-15T16:15:05.931485228Z","published":"2026-10-15T15:57:50Z","upstream":["CVE-2026-92909"],"database_specific":{"distro_version":"","severity":"CRITICAL","source":"Root","distro":"composer"},"affected":[{"package":{"name":"magento/product-enterprise-edition","ecosystem":"Root:Composer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-p512007005+root.io"},{"fixed":"2.4.7-p1012007005+root.io"}]}],"database_specific":{"upstream_version":"2.4.7-p1012007005+root.io","all_fixed_versions":["2.4.8-p512007005+root.io","2.4.7-p1012007005+root.io"],"source":"https://api.root.io/external/osv/ROOT-APP-COMPOSER-CVE-2026-92909.json","root_patch_version":"","root_patched":true,"total_fixed_versions":2}},{"package":{"name":"magento/product-community-edition","ecosystem":"Root:Composer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.74.0-beta2-p12007004+root.io"},{"fixed":"2.4.7-p1012007004+root.io"},{"fixed":"2.3.1-p12007004+root.io"},{"fixed":"2.4.8-p512007004+root.io"},{"fixed":"2.3.1-p12007005+root.io"}]}],"database_specific":{"upstream_version":"2.3.1-p12007005+root.io","source":"https://api.root.io/external/osv/ROOT-APP-COMPOSER-CVE-2026-92909.json","all_fixed_versions":["0.74.0-beta2-p12007004+root.io","2.4.7-p1012007004+root.io","2.3.1-p12007004+root.io","2.4.8-p512007004+root.io","2.3.1-p12007005+root.io"],"root_patch_version":"","root_patched":true,"total_fixed_versions":5}}],"schema_version":"1.9.0"}