Shared on Mage Dispatch · 07 Sep 2026
Open-source extension for warranty management: register serialized units, let authorized dealers submit and track warranties, notify customers of status changes, and handle warranty transfers. Includes Composer-based installation steps.
Pre-split APSB26-146 (VULN-39341) patches tailored for cweagans/composer-patches, organized per 2.4.4-p18 through 2.4.9 with a drop-in patches.json. Covers framework, base, backend, email, and newsletter packages, with steps to apply via Composer.
Composer-installable module that mitigates the Style Smuggler vulnerability by allowlisting email template {{block}} classes, validating grid row URL generator classes, and neutralizing Web API fatal error report output. Includes setup steps and di.xml examples to allowlist needed email blocks and guidance on checking logs for refused classes.
Stopgap hardening package for the Sansec‑disclosed StyleSmuggler RCE: Nginx/Apache request filters, a DI‑scanner CLI guard, a sanitizing module, and scripts for compromise checks, containment, and DB audits. Includes deployment, testing, and incident‑response runbooks; designed to be removed once an official fix ships.
Mage Dispatch is a community-run archive and bi-weekly newsletter for the Magento, Adobe Commerce and Mage-OS ecosystem. Modules, articles, security advisories and tools, hand-picked by developers and shared so good work does not disappear into the void.
Browse the latest links → Explore by topic → Submit a link → About us →
