# Saleor 3.22.27 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.22.27
- **Released:** Jan 21, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.22.27/

## Executive Summary (TL;DR)
Saleor 3.22.27. Source highlight: Fixed CVE-2026-22849 - Lack of proper HTML sanitization in rich text fields

## Bug Fixes
- Fixed CVE-2026-22849 - Lack of proper HTML sanitization in rich text fields
- Fixed CVE-2026-23499 - Stored XSS via Unrestricted File Uploads