https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-05T16:44:49.939246+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2020-7964 CVE-2020-7964 2026-10-05T16:44:49.941646+00:00

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).

 https://vulnerability.circl.lu/vuln/pysec-2026-747 PYSEC-2026-747 — Missing Authentication for Critical Function in Saleor 2026-10-05T16:44:49.941724+00:00

Affected: PyPI: saleor

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).