VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

@vendure/admin-ui-plugin: vulnerability history, versions and safety

@vendure/admin-ui-plugin is a package in the npm ecosystem. Vulert records 1 vulnerability for it across 0 release, first recorded in Jul 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all @vendure/admin-ui-plugin vulnerabilities

Vulert verdict on @vendure/admin-ui-plugin 3.8.0 i

Updated on 23 Oct 2026

Good news: 3.8.0, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 1.

Package health score 88/100
  • Security No known security issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Active

What to do: Stay on 3.8.0 or newer. This can change: a vulnerability disclosed tomorrow can affect 3.8.0 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 3.8.0 — unaffected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 06 Jul 2023 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 8,530 i
  • Last release this month i
  • Licence GPL-3.0-or-later i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for @vendure/admin-ui-plugin, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
3.9.0-minor-202610230219 23 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610230212 23 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610220828 22 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610220213 22 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610200220 20 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610200212 20 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610170220 17 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610170212 17 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610160220 16 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610160212 16 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610150220 15 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610150212 15 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610140219 14 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610140211 14 Oct 2026 none GPL-3.0-or-later — Details →
3.9.0-minor-202610130234 13 Oct 2026 none GPL-3.0-or-later — Details →
3.8.1-master-202610130226 13 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0 12 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610120234 12 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610120227 12 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610110227 11 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610110221 11 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610100228 10 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610100220 10 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610090231 09 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610090223 09 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610081753 08 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610081600 08 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610080220 08 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610070228 07 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610070220 07 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610061734 06 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610060559 06 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610060223 06 Oct 2026 none GPL-3.0-or-later — Details →
3.7.5-master-202610060216 06 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4 05 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610050231 05 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202610050222 05 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610040251 04 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202610040244 04 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610030219 03 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202610030211 03 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610020225 02 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202610020217 02 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610010946 01 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610010839 01 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202610010230 01 Oct 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202610010222 01 Oct 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609301433 30 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609300225 30 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609300217 30 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609290223 29 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609290215 29 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609280220 28 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609270834 27 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609260212 26 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609251002 25 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609220219 22 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609220211 22 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609210943 21 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609210214 21 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609190217 19 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609190210 19 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609180218 18 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609180211 18 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609170218 17 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609170211 17 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609160218 16 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609160211 16 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609150218 15 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609150211 15 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609120217 12 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609120210 12 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609110218 11 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609110210 11 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609100218 10 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609100211 10 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609090219 09 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609090211 09 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609081233 08 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609080219 08 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609080211 08 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609071236 07 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609060211 06 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609050220 05 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609050212 05 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609040217 04 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609040211 04 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609030224 03 Sep 2026 none GPL-3.0-or-later — Details →
3.7.4-master-202609030216 03 Sep 2026 none GPL-3.0-or-later — Details →
3.7.3 02 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609020231 02 Sep 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202609020223 02 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202609010221 01 Sep 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202609010213 01 Sep 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202608280448 28 Aug 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202608280440 28 Aug 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202608270351 27 Aug 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202608270343 27 Aug 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202608260231 26 Aug 2026 none GPL-3.0-or-later — Details →
3.8.0-minor-202608250234 25 Aug 2026 none GPL-3.0-or-later — Details →
3.7.3-master-202608250227 25 Aug 2026 none — — Details →
3.7.3-master-202608240231 24 Aug 2026 none — — Details →
3.8.0-minor-202608220233 22 Aug 2026 none — — Details →
3.7.3-master-202608220226 22 Aug 2026 none — — Details →
3.8.0-minor-202608210610 21 Aug 2026 none — — Details →
3.7.3-master-202608210231 21 Aug 2026 none — — Details →
3.7.3-master-202608200226 20 Aug 2026 none — — Details →
3.8.0-minor-202608190235 19 Aug 2026 none — — Details →
3.7.3-master-202608190227 19 Aug 2026 none — — Details →
3.7.3-master-202608180226 18 Aug 2026 none — — Details →
3.8.0-minor-202608170240 17 Aug 2026 none — — Details →
3.7.3-master-202608170230 17 Aug 2026 none — — Details →
3.8.0-minor-202608150235 15 Aug 2026 none — — Details →
3.7.3-master-202608150226 15 Aug 2026 none — — Details →
3.8.0-minor-202608140305 14 Aug 2026 none — — Details →
3.7.3-master-202608140256 14 Aug 2026 none — — Details →
3.8.0-minor-202608130306 13 Aug 2026 none — — Details →
3.7.3-master-202608130257 13 Aug 2026 none — — Details →
3.8.0-minor-202608120304 12 Aug 2026 none — — Details →
3.7.3-master-202608120256 12 Aug 2026 none — — Details →

The newest 120 of 780 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for @vendure/admin-ui-plugin

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Authenticated Cross-site Scripting Vulnerability in @vendure/admin-ui-plugin N/A medium 2.0.3 06 Jul 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About @vendure/admin-ui-plugin

Is @vendure/admin-ui-plugin safe to use?

Vulert records 1 vulnerabilities for @vendure/admin-ui-plugin in npm: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is @vendure/admin-ui-plugin's Vulert package health score?

Vulert scores @vendure/admin-ui-plugin 88/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of @vendure/admin-ui-plugin affected?

No. 3.8.0, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does @vendure/admin-ui-plugin have?

1 vulnerability is recorded for @vendure/admin-ui-plugin in the npm ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new @vendure/admin-ui-plugin vulnerabilities disclosed?

0 vulnerabilities were recorded for @vendure/admin-ui-plugin in the last 12 months, and the oldest entry in this database dates to 06 Jul 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of @vendure/admin-ui-plugin are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor @vendure/admin-ui-plugin for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @vendure/admin-ui-plugin version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.