spree_core vulnerabilities (RubyGems)

1 vulnerability.

• spree_core RubyGems Spree API has Unauthenticated IDOR - Guest Address CVE-2026-22589 Fix available 7.5 HighJanuary 8, 2026