Skip to content

Unauthenticated Spree Commerce users can access all guest addresses

High severity GitHub Reviewed Published Feb 5, 2026 in spree/spree • Updated Feb 13, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts