Spree

Spree Security Update Addresses 1 Vulnerability

Spree's Store API v3 can let authenticated customers claim another shopper's guest cart and expose stored checkout addresses under the stated conditions. Update the backend branch; replacing the storefront alone does not fix authorization.