CVE-2026-110608Published

BizSpring Shop through commit cf22d39daaf1 IDOR via /member/order Cancel and Receive

cve-program · CVE-2026-110608

Published

BizSpring Shop

https://github.com/BizSpringSource/bizspring-shop-opensource

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "BizSpring",
                    "product": "BizSpring Shop",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "cf22d39daaf17f430d8fc1fb698a2f6e515e1808",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ],
                    "packageURL": "pkg:github/BizSpringSource/bizspring-shop-opensource",
                    "collectionURL": "https://github.com/BizSpringSource/bizspring-shop-opensource",
                    "repo": "https://github.com/BizSpringSource/bizspring-shop-opensource"
                }

BizSpring Java Mall

https://github.com/bizspring-open/BizSpring-Java-Mall

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "BizSpring",
                    "product": "BizSpring Java Mall",
                    "repo": "https://github.com/bizspring-open/BizSpring-Java-Mall",
                    "collectionURL": "https://github.com/bizspring-open/BizSpring-Java-Mall",
                    "packageURL": "pkg:github/bizspring-open/BizSpring-Java-Mall",
                    "versions": [
                        {
                            "version": "0",
                            "lessThanOrEqual": "369e88c5cda36ddcea56742c335ee1bfe50e8156",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON