| Package | Affected versions | Patched versions |
|---|---|---|
| saleor | ≥ 2.0.0, < 3.1.48≥ 3.10.0, < 3.10.14≥ 3.11.0, < 3.11.12≥ 3.7.0, < 3.7.59≥ 3.8.0, < 3.8.30≥ 3.9.0, < 3.9.27 | 3.1.483.10.143.11.123.7.593.8.303.9.27 |
| saleor | ≥ 2.0.0, < 3.1.48≥ 3.10.0, < 3.10.14≥ 3.11.0, < 3.11.12≥ 3.2.0, < 3.7.59≥ 3.8.0, < 3.8.30≥ 3.9.0, < 3.9.27 | 3.1.483.10.143.11.123.7.593.8.303.9.27 |
Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.
This issue has been patched in versions 3.1.48, 3.7.59, 3.8.30, 3.9.27, 3.10.14 and 3.11.12.
None
If you have any questions or comments about this advisory:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free