CVE-2026-45571

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.1 and 6.0.0-alpha.4, a path validation issue in go-git could allow crafted repository data to affect files outside the intended checkout target, including the repository's .git directory. These validations were...

CVE-2020-7964

An issue was discovered in Mirumee Saleor 2.x before 2.9.1. Incorrect access control in the checkoutCustomerAttach mutations allows attackers to attach their checkouts to any user ID and consequently leak user data e.g., name, address, and previous orders of any other customer...

PT-2020-19880

Name of the Vulnerable Software and Affected Versions Mirumee Saleor versions prior to 2.9.1 Description The issue is related to incorrect access control in the checkoutCustomerAttach mutations, allowing attackers to attach their checkouts to any user id and leak user data, such as name, address,...