# Saleor 3.21.43 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.21.43
- **Released:** Jan 21, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.21.43/

## Executive Summary (TL;DR)
Saleor 3.21.43. Source highlight: Fixed CVE-2026-22849 - Lack of proper HTML sanitization in rich text fields

## Bug Fixes
- Fixed CVE-2026-22849 - Lack of proper HTML sanitization in rich text fields
- Fixed CVE-2026-23499 - Stored XSS via Unrestricted File Uploads