HIGHRubyGems
GHSA-p6pv-q7rc-g4h9· CVE-2026-25757Unauthenticated Spree Commerce users can view completed guest orders by Order ID
Modified: 2/13/2026
package
RubyGems/spree_storefront
pkg:rubygems/spree_storefront
package
pkg:rubygems/spree_storefront
Unauthenticated Spree Commerce users can view completed guest orders by Order ID
Modified: 2/13/2026