[HIGH] Craft Commerce is Vulnerable to SQL Injection in Commerce Purchasables Table Sorting

PKSA-hf29-t8gq-x1bd CVE-2026-29172 GHSA-j3x5-mghf-xvfw

Affected package: craftcms/commerce

Affected version: >=5.0.0,<=5.5.2|>=4.0.0,<=4.10.1

Reported by:
GitHub