@medusajs/medusa

Building blocks for digital commerce
Licenses: AGPL-3.0 | Unknown | MIT
This package was involved in a security incident resulting in compromised versions being published. Please verify the versions before use.

License

AGPL-3.0>=0.1.6-alpha.0 <1.0.10;
>=2.19.0-snapshot-20260811152026;
>=0.0.0-klarna-shipping-fix-20220718161248 <0.1.6-alpha.0;
>=1.0.10 <2.19.0-snapshot-20260811152026;

Direct Vulnerabilities

Known vulnerabilities in the @medusajs/medusa package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Embedded Malicious Code

=2.11.4-preview-20251124090208=2.11.4-preview-20251124060135

Package versions

1197 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
2.22.0-snapshot-2026091121235811 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026091121044011 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026091118371211 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-preview-202610021012462 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-preview-202610020939302 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.21.228 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.21.2-snapshot-2026092807552128 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.21.2-snapshot-2026092515042625 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.21.2-preview-2026092513394825 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.21.122 Sep, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L