Web Applications & E-Commerce
Abis Technology AVESIS Update Fixes Open Redirect
09/23/2026
Affected AVESIS builds can redirect users to untrusted destinations without an attacker account. Confirm the deployed build and supported correction with the service owner; an open redirect alone does not establish account takeover or code execution.
Spree Security Update Addresses 1 Vulnerability
09/22/2026
Spree's Store API v3 can let authenticated customers claim another shopper's guest cart and expose stored checkout addresses under the stated conditions. Update the backend branch; replacing the storefront alone does not fix authorization.