packagist package report

Is oxid-esales/paymorrow-module safe?

1 known vulnerability, worst severity MODERATE.

cvss

5.0

how bad it is if exploited, out of 10

epss

1.1%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-489x-ccjw-q7c4, the advisory selected below

// advisories

GHSA-489x-ccjw-q7c4

MODERATECVE-2018-14020

An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the delivery address to one that is not verified by the Paymorrow module.

Affected: >= 1.0.0, < 1.0.2
Fixed in: 1.0.2
Published: 2022-05-13
Source: github

GHSA NVD MITRE reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.

Checked 2026-09-22 at 00:50 UTC. The most recent advisory here was published 2022-05-13. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is oxid-esales/paymorrow-module safe? packagist package security report | CyberXYZ