Products: 3
    Vulnerabilities: 20
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    15
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-44472

    Saleor: Account pre-hijacking vulnerability due to unverified anonymous order merge

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-48744

    Saleor: Anonymous users can modify channel settings via `channelUpdate` due to `all([])` bypass in permission check

    Last Modified: Aug 19, 2026
    Published: Aug 18, 2026

    CVE-2026-42175

    requests-hardened: Server-Side Request Forgery (SSRF) in requests-hardened RFC 6598

    Last Modified: May 13, 2026
    Published: May 12, 2026

    CVE-2026-39851

    Saleor has a user enumeration vulnerability due to different error messages

    Last Modified: Apr 20, 2026
    Published: Apr 08, 2026

    CVE-2026-35407

    Saleor has Cross-Account Email Change via Unbound Confirmation Token

    Last Modified: Apr 15, 2026
    Published: Apr 08, 2026
    Items Per Page
    Saleor Vulnerabilities & Security CVEs | CVE-DB