security-patch
-
https://github.com/SamJUK/m2-meta-security-patches
Composer meta package bundling isolated monthly and emergency security fixes into one dependency via vaimo/composer-patches. Includes install and source-restriction steps, details on patch adjustments and reapplying after vendor resets, plus coverage for CVEs like CosmicSting.
214 -
https://github.com/qoliber/2026-07-001-CE-cweagans-patches#
Provides per-package patch sets for the July 2026 security release, compatible with cweagans/composer-patches, covering 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, and 2.4.9 (including B2B). Includes composer.json snippets, application steps, and notes on nginx.conf.sample and the omitted patch-status script.
17 -
https://github.com/aregowe/magento2-module-polyshell-protection
Defense-in-depth module that blocks the PolyShell unrestricted file upload attack with layered checks: request/media path blocking, strict filename/extension validation, and polyglot content detection. Provides Composer install steps, admin-configurable allow/block lists, logging, and migration from markshust/polyshell-patch.
964