Executive brief
Missing Authentication for Critical Function in Saleor
Affected products
- PyPI saleor
Junglewise Threat Intelligence
CVE-2020-7964: PYSEC-2026-747 - Missing Authentication for Critical Function in Saleor
CVE-2020-7964 · Severity: low · CVSS 3.1 · Published 2026-07-02
Vendors: PyPI.
Related threats
- PYSEC-2026-916 - Mirumee Saleor CSRF Protection Disabled
- PYSEC-2026-746 - saleor Missing Authorization vulnerability
- Saleor information leak in Local stock only pickup method
- Saleor information disclosure via Python exceptions in API error messages
- Saleor information disclosure via unhandled Python exceptions