https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:34:50.628841+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-15269 CVE-2020-15269 — Expired token reuse in Spree 2026-10-07T00:34:50.648420+00:00

Affected: spree

In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround without upgrading is described in the linked advisory.