https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T11:17:00.850288+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-220967 EUVD-2026-220967 2026-10-09T11:17:00.914734+00:00 EUVD-2026-220967 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26051 fkie_cve-2023-26051 2026-10-09T11:17:00.914808+00:00

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.

 https://cve.radiocsirt.org/vuln/ghsa-r8qr-wwg3-2r85 GHSA-r8qr-wwg3-2r85 — Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions 2026-10-09T11:17:00.914870+00:00

Affected: PyPI: Saleor

### Impact Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.

This issue has been patched in versions 3.1.48, 3.7.59, 3.8.30, 3.9.27, 3.10.14 and 3.11.12.

### Workarounds None

### For more information If you have any questions or comments about this advisory: * Open a discussion at https://github.com/saleor/saleor/discussions * Email us at [hello@saleor.io](mailto:hello@saleor.io)

 https://cve.radiocsirt.org/vuln/gsd-2023-26051 gsd-2023-26051 2026-10-09T11:17:00.914934+00:00 gsd-2023-26051 https://cve.radiocsirt.org/vuln/pysec-2026-917 PYSEC-2026-917 — Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions 2026-10-09T11:17:00.914953+00:00

Affected: PyPI: saleor

### Impact Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.

This issue has been patched in versions 3.1.48, 3.7.59, 3.8.30, 3.9.27, 3.10.14 and 3.11.12.

### Workarounds None

### For more information If you have any questions or comments about this advisory: * Open a discussion at https://github.com/saleor/saleor/discussions * Email us at [hello@saleor.io](mailto:hello@saleor.io)