Read the docs

TrueLayer

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TrueLayer records in CISA KEV

No TrueLayer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority LOW 34

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize() function without restrictions on the classes allo…

CVSS 4.0HIGH 7.5 Local No auth No interaction EPSS 0.00167 Published 2026-10-06 No fix listed CWE-502
Open these records in search →