PT-2026-94346

Name of the Vulnerable Software and Affected Versions Vendure versions prior to 3.7.0 Description An account takeover issue exists in the headless commerce platform where the ExternalAuthenticationService.createCustomerAndUser function links a new external authentication method to an existing use...