# Saleor 3.21.67 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.21.67
- **Released:** Jul 27, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.21.67/

## Executive Summary (TL;DR)
Saleor 3.21.67. Source highlight: Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge

## New Features
- tests: add missing test for old_id when fetching orders

## Bug Fixes
- Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge
- Fixed CVE-2026-48744 - Anonymous users can bypass authorization checks in selected GraphQL paths