https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T15:01:08.481783+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-39851 CVE-2026-39851 — Saleor has a user enumeration vulnerability due to different error messages 2026-10-07T15:01:08.483126+00:00

Affected: saleor

Saleor is an e-commerce platform. From 2.10.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, the requestEmailChange() mutation was revealing the existence of user-provided email addresses in error messages. This vulnerability is fixed in 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118.