# Saleor 3.22.63 — Release & Upgrade Intelligence
- **Product:** Saleor (https://saleor.io)
- **Version:** 3.22.63
- **Released:** Jul 27, 2026
- **Impact Score:** 5/10
- **Breaking Changes:** Not verified
- **Canonical Analysis:** https://changelogs.us/saleor/updates/3.22.63/

## Executive Summary (TL;DR)
Saleor 3.22.63. Source highlight: Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge

## New Features
- tests: add missing test for old_id when fetching orders

## Bug Fixes
- Fixed CVE-2026-44472 - Account pre-hijacking vulnerability due to unverified anonymous order merge
- Fixed CVE-2026-48744 - Anonymous users can bypass authorization checks in selected GraphQL paths