THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-g3f9-g5vj-p62f (high) — Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

[GHSA] GHSA-g3f9-g5vj-p62f (high) — Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

medgithub_advisoriesPublished 2026-09-11

GHSA-g3f9-g5vj-p62f Severity: high CVE: CVE-2026-56829

Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

## Title

Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

## Description

A lack of authorization control was discovered in the `stockAction()` method in `packages/admin/src/Livewire/Co

Indicators of compromise

CVE-2026-56829cve

Original source: https://github.com/advisories/GHSA-g3f9-g5vj-p62f