cve.bz

CVE-2023-26051

4.3 mediumEPSS 0.8%

Medium (4.3) in saleor saleor. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in saleor 3.1.48, 3.10.14, 3.11.12.

Saleor is a headless, GraphQL commerce platform delivering personalized shopping experiences. Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.

Severity

CVSS 3.1

4.3 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE
CWE-209
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-r8qr-wwg3-2r85PyPIsaleor>=2.0.0 <3.1.483.1.48
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.11.0 <3.11.123.11.12
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.10.0 <3.10.143.10.14
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.9.0 <3.9.273.9.27
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.8.0 <3.8.303.8.30
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.7.0 <3.7.593.7.59
GHSA-r8qr-wwg3-2r85PyPIsaleor>=2.0.0 <3.1.483.1.48
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.7.0 <3.7.593.7.59
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.8.0 <3.8.303.8.30
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.9.0 <3.9.273.9.27
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.10.0 <3.10.143.10.14
GHSA-r8qr-wwg3-2r85PyPIsaleor>=3.11.0 <3.11.123.11.12
PYSEC-2026-917PyPIsaleor>=2.0.0 <3.1.48
>=3.7.0 <3.7.59
>=3.8.0 <3.8.30
>=3.9.0 <3.9.27
>=3.10.0 <3.10.14
>=3.11.0 <3.11.12		3.1.48, 3.7.59, 3.8.30, 3.9.27, 3.10.14, 3.11.12

References

Check your stackJSON