magento2-module-polyshell-protection

Comprehensive defense-in-depth Magento 2 module that closes the PolyShell unrestricted file upload vulnerability (APSB25-94) — blocking polyglot webshell uploads across eight interception layers including request path blocking, controller-level upload prevention, polyglot file detection, and framework-level image hardening. Maintained by aregowe on GitHub, where it has earned 59 stars from the community.

It's actively developed around magento, magento2, php, and is a solid reference for anyone building with these tools.