Homepage

@medusajs/medusa

Building blocks for digital commerce
Licenses: AGPL-3.0 | Unknown | MIT
Published: 6 years ago Last updated: 4 hours ago Latest version: 2.22.1 Latest non-vulnerable version: 2.22.1
This package was involved in a security incident resulting in compromised versions being published. Please verify the versions before use.

License

AGPL-3.0>=0.1.6-alpha.0 <1.0.10;
Unknown
>=2.19.0-snapshot-20260811152026;
MIT
>=0.0.0-klarna-shipping-fix-20220718161248 <0.1.6-alpha.0;
>=1.0.10 <2.19.0-snapshot-20260811152026;
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @medusajs/medusa package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Embedded Malicious Code

=2.11.4-preview-20251124090208=2.11.4-preview-20251124060135

Package versions

1212 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
2.22.123 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.021 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026102109134721 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026102020485120 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026102014041120 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026102013071120 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026101921062119 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026101916314219 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026101915124119 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
2.22.0-snapshot-2026101608103616 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L