2026-07-001 Security Patches for cweagans/composer-patches

More like this

• Orangecat B2BSDK Meta-Installer

  Composer meta-package that installs 12 Orangecat B2B modules (company accounts and approval, company credit, payment/shipping restrictions, sales reps, custom pricing/price lists, product lists, purchase orders, quick order, RMAs, visibility rules). Includes setup commands, requirements, and dependency order.

  https://github.com/olivertar/m2_b2bsdk

  4

  23

  #b2b #composer #module #installer

  16 Jun 2026

• PolyShell Protection Module (APSB25-94)

  Defense-in-depth module that blocks the PolyShell unrestricted file upload attack with layered checks: request/media path blocking, strict filename/extension validation, and polyglot content detection. Provides Composer install steps, admin-configurable allow/block lists, logging, and migration from markshust/polyshell-patch.

  https://github.com/aregowe/magento2-module-polyshell-protection

  9

  62

  #security-patch #rest-api #module #File Upload

  21 Apr 2026

• QuickOrder Module for Enhanced Cart Functionality

  QuickOrder is a free module that enables customers to add multiple products to their cart using SKU or product names in a single form. It features a fast and simple UI, is compatible with Hyvä Theme, and is particularly useful for B2B and wholesale stores. Installation is done via Composer, and the module is open-source under the MIT license.

  https://github.com/brosolutions/quick-order

  3

  7

  #b2b #E-commerce #Extension

  15 Sep 2025