CyberSecBulletin

TrueLayer vulnerabilities

We track 2 vulnerabilities in TrueLayer products across 3 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest TrueLayer vulnerabilities

  • 7.5 High severity

    TrueLayer Magento 2 Plugin: Deserialization of Untrusted Data

    CVE-2026-103831TrueLayer

    CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize() function without restrictions on the classes allowed when retrieving data stored in the c

  • 7.5 High severity

    truelayer-dotnet: Server-Side Request Forgery

    CVE-2024-23838TrueLayer

    TrueLayer.NET is the .Net client for TrueLayer. The vulnerability could potentially allow a malicious actor to gain control over the destination URL of the HttpClient used in the API classes. For applications using the SDK, requests to unexpected resources on