[MEDIUM] Shopping privilege escalation through missing authorization in Settings components

PKSA-kzx5-8h8q-mx1w CVE-2026-56826 GHSA-f7h9-qv4x-9x57

Affected package: shopper/framework

Affected version: >=2.0.0,<2.9.2

Reported by:
GitHub