spree_api
RubyGems · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) | spree_api | RubyGems | High | Fix reported | |
| Authorization bypass in Spree | spree_api | RubyGems | High | Fix reported | |
| Unauthenticated Spree Commerce users can access all guest addresses | spree_api | RubyGems | High | Fix reported | |
| Spree API has Authenticated Insecure Direct Object Reference (IDOR) via Order Modification | spree_api | RubyGems | Medium | Fix reported |