PYSEC-2026-1890 Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Summary Using Pickup: Local stock only as a click-and-collect points could cause a leak of customer addresses Details When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes it...

CVE-2024-29888

Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...

PT-2024-23111

Name of the Vulnerable Software and Affected Versions Saleor versions prior to 3.14.61 Saleor versions prior to 3.15.37 Saleor versions prior to 3.16.34 Saleor versions prior to 3.17.32 Saleor versions prior to 3.18.28 Saleor versions prior to 3.19.15 Description The issue occurs when using Picku...

CVE-2024-29888: Exposure of Private Personal Information to an Unauthorized Actor

Saleor is an e-commerce platform that serves high-volume companies. When using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its address as click-and-collect address. This issue...