agentprime: saleorEvery new CVE for saleor.https://agentprime.io/CVE-2026-93650: Saleor throttling.py get_client_ip excessive authenticationhttps://agentprime.io/advisories/CVE-2026-93650/https://agentprime.io/advisories/CVE-2026-93650/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 18:15:10 GMTCVECVE-2026-44472: Saleor: Account pre-hijacking vulnerability due to unverified anonymous order mergehttps://agentprime.io/advisories/CVE-2026-44472/https://agentprime.io/advisories/CVE-2026-44472/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:11:42 GMTCVECVE-2026-48744: Saleor: Anonymous users can modify channel settings via `channelUpdate` due to `all([])` bypass in permission checkhttps://agentprime.io/advisories/CVE-2026-48744/https://agentprime.io/advisories/CVE-2026-48744/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Aug 2026 17:10:05 GMTCVECVE-2026-39851: Saleor has a user enumeration vulnerability due to different error messageshttps://agentprime.io/advisories/CVE-2026-39851/https://agentprime.io/advisories/CVE-2026-39851/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:33:37 GMTCVECVE-2026-35407: Saleor has Cross-Account Email Change via Unbound Confirmation Tokenhttps://agentprime.io/advisories/CVE-2026-35407/https://agentprime.io/advisories/CVE-2026-35407/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:24:39 GMTCVECVE-2026-35401: Saleor has a resource exhaustion vulnerability in GraphQL querieshttps://agentprime.io/advisories/CVE-2026-35401/https://agentprime.io/advisories/CVE-2026-35401/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:22:10 GMTCVECVE-2026-33756: Saleor Affected by Denial of Service via Unbounded GraphQL Query Batchinghttps://agentprime.io/advisories/CVE-2026-33756/https://agentprime.io/advisories/CVE-2026-33756/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 17:07:57 GMTCVECVE-2026-24136: Saleor has an Insecure Direct Object Reference (IDOR) in GraphQL APIhttps://agentprime.io/advisories/CVE-2026-24136/https://agentprime.io/advisories/CVE-2026-24136/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 23 Jan 2026 23:38:31 GMTCVECVE-2026-23499: Saleor vulnerable to stored XSS via Unrestricted File Uploadhttps://agentprime.io/advisories/CVE-2026-23499/https://agentprime.io/advisories/CVE-2026-23499/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 21:36:19 GMTCVECVE-2026-22849: Saleor lacks proper HTML sanitization in rich text fieldshttps://agentprime.io/advisories/CVE-2026-22849/https://agentprime.io/advisories/CVE-2026-22849/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Jan 2026 21:31:14 GMTCVECVE-2025-58442: Saleor has user enumeration vulnerability due to different error messageshttps://agentprime.io/advisories/CVE-2025-58442/https://agentprime.io/advisories/CVE-2025-58442/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:46:45 GMTCVECVE-2024-31205: Saleor CSRF bypass in refreshToken mutationhttps://agentprime.io/advisories/CVE-2024-31205/https://agentprime.io/advisories/CVE-2024-31205/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 08 Apr 2024 14:26:30 GMTCVECVE-2023-32694: Non-constant time HMAC comparison in Adyen plugin in Saleorhttps://agentprime.io/advisories/CVE-2023-32694/https://agentprime.io/advisories/CVE-2023-32694/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 May 2023 14:29:10 GMTCVECVE-2022-39275: Improper object type validation in saleorhttps://agentprime.io/advisories/CVE-2022-39275/https://agentprime.io/advisories/CVE-2022-39275/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Oct 2022 00:00:00 GMTCVECVE-2019-1010304: Saleor Issue was introduced by merge commit: e1b01bad0703afd08d297ed3f1f472248312cc9c.https://agentprime.io/advisories/CVE-2019-1010304/https://agentprime.io/advisories/CVE-2019-1010304/Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Jul 2019 14:45:39 GMTCVE