PKSA-hf29-t8gq-x1bd Security Advisory
-
[HIGH] Craft Commerce is Vulnerable to SQL Injection in Commerce Purchasables Table Sorting
PKSA-hf29-t8gq-x1bd CVE-2026-29172 GHSA-j3x5-mghf-xvfw
Affected package: craftcms/commerce
Affected version: >=5.0.0,<=5.5.2|>=4.0.0,<=4.10.1
Reported by:
GitHub