Homepage

@medusajs/medusa

Building blocks for digital commerce
Licenses: AGPL-3.0 | MIT
Published: 6 years ago Last updated: 19 days ago Latest version: 2.18.0 Latest non-vulnerable version: 2.19.0-snapshot-20260811120905
This package was involved in a security incident resulting in compromised versions being published. Please verify the versions before use.

License

AGPL-3.0>=0.1.6-alpha.0 <1.0.10;
MIT
>=0.0.0-klarna-shipping-fix-20220718161248 <0.1.6-alpha.0;
>=1.0.10;
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @medusajs/medusa package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Embedded Malicious Code

=2.11.4-preview-20251124090208=2.11.4-preview-20251124060135

Package versions

1122 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
2.19.0-snapshot-2026081112090511 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-2026081111593111 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-2026081110000911 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-2026081109512311 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-2026081107592511 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-2026081013101410 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-202608071031087 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-snapshot-202608041040204 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-preview-2026081110404811 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.19.0-preview-2026081110231611 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L