saleor vulnerabilities
CVEs whose affected-version data names the saleor package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2026-93650Low· 3.7PoCA vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14
A vulnerability was determined in Saleor up to 3.20.118/3.21.54/3.22.47/3.23.14. This vulnerability affects the function get_client_ip of the file saleor/account/throttling.py. Executing a manipulation can lead to improper restriction of…
CVE-2024-29888Medium· 4.2Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method
CVE-2023-26051Medium· 6.5Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
CVE-2023-26052Low· 3.7Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
CVE-2019-13594High· 8.8Mirumee Saleor CSRF Protection Disabled
Mirumee Saleor CSRF Protection Disabled
CVE-2022-0932Medium· 6.5saleor Missing Authorization vulnerability
saleor Missing Authorization vulnerability
CVE-2020-7964Medium· 5.3Missing Authentication for Critical Function in Saleor
Missing Authentication for Critical Function in Saleor