<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 12 Oct 2026 18:22:32 +0000</lastBuildDate>
    <item>
      <title>cnvd-2020-10609</title>
      <link>https://cve.radiocsirt.org/vuln/cnvd-2020-10609</link>
      <description>cnvd-2020-10609</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/cnvd-2020-10609</guid>
    </item>
    <item>
      <title>EUVD-2026-38170</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-38170</link>
      <description>EUVD-2026-38170</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-38170</guid>
    </item>
    <item>
      <title>fkie_cve-2020-7964</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2020-7964</link>
      <description>&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2020-7964</guid>
    </item>
    <item>
      <title>GHSA-rgcm-rpq9-9cgr — Missing Authentication for Critical Function in Saleor</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-rgcm-rpq9-9cgr</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: saleor&lt;/p&gt;
&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: saleor&lt;/p&gt;
&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-rgcm-rpq9-9cgr</guid>
    </item>
    <item>
      <title>gsd-2020-7964</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2020-7964</link>
      <description>gsd-2020-7964</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2020-7964</guid>
    </item>
    <item>
      <title>PYSEC-2026-747 — Missing Authentication for Critical Function in Saleor</title>
      <link>https://cve.radiocsirt.org/vuln/pysec-2026-747</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: saleor&lt;/p&gt;
&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; PyPI: saleor&lt;/p&gt;
&lt;p&gt;An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data (e.g., name, address, and previous orders of any other customer).&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/pysec-2026-747</guid>
    </item>
  </channel>
</rss>
