[MEDIUM] Shopper: Negative discount values accepted and propagated through order calculation pipeline

PKSA-j6gh-mr7c-jrwc CVE-2026-56831 GHSA-5vf4-452p-jjhf

Affected package: shopper/framework

Affected version: <2.9.0

Reported by:
GitHub