Skip to content
OpenAdvisories

Package · Packagist

shopper/cart

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.9
    CVE-2026-47741

    Shopper: Race condition on Discount.usage_limit allows silent over-redemption

    Shopper is a Headless e-commerce Admin Panel. Prior to 2.8.0, CreateOrderFromCartAction::execute previously created the Order row before checking and incrementing the discount's total_use counter. Under concurrent checkout pressure (Black Friday, flash sale, …

    shopperlabs shopper shopper/cart Packagist