Skip to content

A little signal. Less noise.

DISCOVER

Catalog Categories

CATEGORIES

Categories will appear when the source is connected.

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLConnection pending

ExploreCatalog

A little signal. Less noise.

Loading the catalog…

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

Skip to content

A little signal. Less noise.

DISCOVER

Catalog Categories

CATEGORIES

Categories will appear when the source is connected.

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLStorage available

ExploreOffer details

A little signal. Less noise.

Back to catalog

C

Security advisory

CVE-2026-94462: Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

spree_api

About this offer

high severity · CVSS 7.1 · CWE-639 · rubygems spree_api · affected >= 5.4.0, < 5.4.4 · fixed in 5.4.4

Offer details

Provider: spree_api
Source: github-advisories
Score: 69.7
Confidence: 67%

Source evidence

What RADAR observed and classified to build this opportunity. It is what the source published, not a verification that the offer is still active.

GitHub Security AdvisoriesObserved: Sep 22, 2026Source reliability: 85%
CVE-2026-94462: Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR) — spree_api, fixed in 5.4.4
Open source

CVE-2026-94462: Spree: Broken Access Control in `PATCH /api/v3/store/carts/:id/associate` (IDOR)

Opens an external website. Availability and terms may change.

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

Real offers. Useful details.

The catalog shows persisted RADAR opportunities. Storage availability does not mean sources are verified or offers are active.