https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 17:22:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322959 EUVD-2026-322959 https://cve.radiocsirt.org/vuln/euvd-2026-322959 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47741 <p>Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount&#39;s total_use counter. Under concurrent checkout pressure (Black Friday, flash sale, viral coupon), the global usage_limit was silently exceeded: orders were committed with the discount fully applied to price_amount while the counter blocked at usage_limit. The merchant had no signal that an over-redemption had occurred. This vulnerability is fixed in 2.8.0.</p> <p>Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount&#39;s total_use counter. Under concurrent checkout pressure (Black Friday, flash sale, viral coupon), the global usage_limit was silently exceeded: orders were committed with the discount fully applied to price_amount while the counter blocked at usage_limit. The merchant had no signal that an over-redemption had occurred. This vulnerability is fixed in 2.8.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-47741 https://cve.radiocsirt.org/vuln/ghsa-9rh9-hf3w-9fgg <p><strong>Affected:</strong> Packagist: shopper/cart</p> <p>## Impact</p> <p>`CreateOrderFromCartAction::execute` previously created the `Order` row before checking and incrementing the discount&#39;s `total_use` counter. Under concurrent checkout pressure (Black Friday, flash sale, viral coupon), the global `usage_limit` was silently exceeded: orders were committed with the discount fully applied to `price_amount` while the counter blocked at `usage_limit`. The merchant had no signal that an over-redemption had occurred.</p> <p>A second related bug: `usage_limit_per_user` was effectively a no-op because the counter it relied on (`DiscountDetail.total_use`) was never incremented anywhere in the codebase. The per-user check therefore always saw `0` uses and validation passed regardless of how many times the same customer had previously redeemed the coupon. For `eligibility = Everyone` the per-user limit could not fire at all because the underlying `DiscountDetail` row only exists for `eligibility = Customers`.</p> <p>Direct financial loss: each over-redemption is a discount the merchant did not intend to grant.</p> <p>## Patches</p> <p>Fixed in `v2.8.0`. `CreateOrderFromCartAction` now:</p> <p>- Reserves the discount slot atomically before the order row is created, inside the same `DB::transaction` with `lockForUpdate` and a compare-and-swap on `total_use`. - Throws `DiscountLimitReachedException::global` and rolls back the transaction when the global limit was exhausted between cart validation and commit. No order is committed. - Throws `DiscountLimitReachedException::perU…</p> <p><strong>Affected:</strong> Packagist: shopper/cart</p> <p>## Impact</p> <p>`CreateOrderFromCartAction::execute` previously created the `Order` row before checking and incrementing the discount&#39;s `total_use` counter. Under concurrent checkout pressure (Black Friday, flash sale, viral coupon), the global `usage_limit` was silently exceeded: orders were committed with the discount fully applied to `price_amount` while the counter blocked at `usage_limit`. The merchant had no signal that an over-redemption had occurred.</p> <p>A second related bug: `usage_limit_per_user` was effectively a no-op because the counter it relied on (`DiscountDetail.total_use`) was never incremented anywhere in the codebase. The per-user check therefore always saw `0` uses and validation passed regardless of how many times the same customer had previously redeemed the coupon. For `eligibility = Everyone` the per-user limit could not fire at all because the underlying `DiscountDetail` row only exists for `eligibility = Customers`.</p> <p>Direct financial loss: each over-redemption is a discount the merchant did not intend to grant.</p> <p>## Patches</p> <p>Fixed in `v2.8.0`. `CreateOrderFromCartAction` now:</p> <p>- Reserves the discount slot atomically before the order row is created, inside the same `DB::transaction` with `lockForUpdate` and a compare-and-swap on `total_use`. - Throws `DiscountLimitReachedException::global` and rolls back the transaction when the global limit was exhausted between cart validation and commit. No order is committed. - Throws `DiscountLimitReachedException::perU…</p> https://cve.radiocsirt.org/vuln/ghsa-9rh9-hf3w-9fgg