Impact Score: 5/10
Saleor 3.11.12 — Release Notes & Engineering Impact
Source available — automated, not human-reviewed
Component: saleor · Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-02.
⚡ Executive Summary (TL;DR)
Saleor 3.11.12. Source highlight: CVE-2023-26051: Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Who Does This Impact? (Role-Based Analysis)
💻 Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
📊 Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
⚙️ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
📄 View Raw Release Notes (Original Developer Log)
## CVE-2023-26051: Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Severity: medium
Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like user email address in staff-authenticated requests.
Affected versions: Saleor ≥ 2.0.0
## CVE-2023-26052: Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Severity: low
Some internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated requests.
Affected versions: Saleor ≥ 2.0.0
---
**Full Changelog**: https://github.com/saleor/saleor/compare/3.11.11...3.11.12