spree Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by spree

JSON RSS CSV 🔔 Create Alert Trigger

22 September 2026

Unauthorized Cart Association in Spree E-commerce Platform
CVE-2026-94462
SpreeSpree7.1HIGH

6 February 2026

Information Disclosure in Spree E-commerce Solution by Spree Commerce
CVE-2026-25757
SpreeSpree7.7HIGH
IDOR Vulnerability in Spree Commerce's Guest Checkout Flow
CVE-2026-25758
SpreeSpree7.7HIGH

10 January 2026

Unauthenticated Insecure Direct Object Reference in Spree Open Source E-commerce Solution
CVE-2026-22589
SpreeSpree7.5HIGH

17 November 2021

Authentication Bypass by CSRF Weakness
CVE-2021-41275
SpreeSpree Auth Devise9.3CRITICAL

13 November 2020

Authorization bypass in Spree
CVE-2020-26223
SpreeSpree7.7HIGH

20 October 2020

Expired token reuse in Spree
CVE-2020-15269
SpreeSpree7.4HIGH