spree_storefront vulnerabilities (RubyGems)

1 vulnerability.

• spree_storefront RubyGems Unauthenticated Spree Commerce users can view completed guest orders by Order ID CVE-2026-25757 Fix available 7.7 HighFebruary 5, 2026