# Saleor 3.22.49 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.22.49
- **Released:** Apr 27, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.22.49/

## Executive Summary (TL;DR)
Saleor 3.22.49. Source highlight: Fix failed request handler in AvataxPlugin

## Bug Fixes
- Fix failed request handler in AvataxPlugin
- Fix CVE-2026-42175 - SSRF bypass via unfiltered RFC 6598 shared address space (100.64.0.0/10) by upgrading `requests-hardened` to v1.2.1
