Magento ended official support for Magento Commerce 1; remaining installations needed migration or separately arranged maintenance to retain security coverage.
Adobe published fixes for critical XXE vulnerability CVE-2024-34102 in Adobe Commerce and Magento Open Source. Its bulletin later confirmed limited in-the-wild attacks targeting Commerce merchants.
Adobe published fixes for critical XXE vulnerability CVE-2024-34102 in Adobe Commerce and Magento Open Source. Its bulletin later confirmed limited in-the-wild attacks targeting Commerce merchants. Consult the bulletin for branch-specific patches.
A Magento 2.4.7 user reported checkout JavaScript failures with merged/minified scripts and Cloudflare Rocket Loader. The configuration matters; this does not establish a universal Magento checkout failure.