spree_api vulnerabilities

CVEs whose affected-version data names the spree_api package (rubygems). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-94462High· 7.1PoC

yesterday

Spree is an open source e-commerce solution built with Ruby on Rails

Spree is an open source e-commerce solution built with Ruby on Rails. From 5.4.0 until 5.4.4 and 5.5.4, PATCH /api/v3/store/carts/:id/associate in Spree::Api::V3::Store::CartsController#associate uses find_cart_for_association to locate …

▾ Midnightspree_api · spree_apiEPSS 0.38%via NVD