https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 18:20:26 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-60608 EUVD-2026-60608 https://cve.radiocsirt.org/vuln/euvd-2026-60608 https://cve.radiocsirt.org/vuln/fkie_cve-2019-1010304 <p>Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop&#39;s revenue data. The fixed version is: 2.3.1.</p> <p>Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop&#39;s revenue data. The fixed version is: 2.3.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-1010304 https://cve.radiocsirt.org/vuln/ghsa-9r7g-8c57-3gxp <p>Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop&#39;s revenue data. The fixed version is: 2.3.1.</p> <p>Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c. This commit was released as part of 2.0.0 release is affected by: Incorrect Access Control. The impact is: Important. The component is: ProductVariant type in GraphQL API. The attack vector is: Unauthenticated user can access the GraphQL API (which is by default publicly exposed under `/graphql/` URL) and fetch products data which may include admin-restricted shop&#39;s revenue data. The fixed version is: 2.3.1.</p> https://cve.radiocsirt.org/vuln/ghsa-9r7g-8c57-3gxp https://cve.radiocsirt.org/vuln/gsd-2019-1010304 gsd-2019-1010304 https://cve.radiocsirt.org/vuln/gsd-2019-1010304