@medusajs/medusa

Building blocks for digital commerce
Licenses: AGPL-3.0 | Unknown | MIT
This package was involved in a security incident resulting in compromised versions being published. Please verify the versions before use.

License

AGPL-3.0>=0.1.6-alpha.0 <1.0.10;
>=2.19.0-snapshot-20260811152026;
>=0.0.0-klarna-shipping-fix-20220718161248 <0.1.6-alpha.0;
>=1.0.10 <2.19.0-snapshot-20260811152026;

Direct Vulnerabilities

Known vulnerabilities in the @medusajs/medusa package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Embedded Malicious Code

=2.11.4-preview-20251124090208=2.11.4-preview-20251124060135

Package versions

1156 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
2.20.0-snapshot-2026082813341428 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082812443428 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082812301328 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082808530128 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082716593427 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082711245927 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082711013727 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082710481827 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082120334721 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.20.0-snapshot-2026082113050321 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L