Home / ECOMMERCE / Saleor / 3.23.8
Saleor 3.23.8stable Released Jun 03, 2026
Impact Score: 5/10

Saleor 3.23.8 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: saleor · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes
📄 .MD
⚡ Improvements 1 🔧 Bug Fixes 5
⚡ Executive Summary (TL;DR)

Saleor 3.23.8. Source highlight: Fixed `TypeError` when resolving default channel slug on product types (#19251)

Visit Saleor Official Site ↗ Official Release Source ↗ All Saleor Releases 📡 Saleor RSS
Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

⚡ Performance & Enhancements (1)

  • Improved Sentry's PII scrubber

🔧 Bug Fixes & Patches (5)

  • Fixed `TypeError` when resolving default channel slug on product types (#19251)
  • Fixed KeyError when resolving channel for channel-agnostic account events (#19253)
  • Fixed saving language code in customerUpdate mutation (#19254)
  • Bumped Django to v5.2.15 to fix the following (by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19283):
  • Bumped urllib3 to v2.7.0 to fix the following (by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19283):
📄 View Raw Release Notes (Original Developer Log)
## What's Changed Bug fixes: - Fixed `TypeError` when resolving default channel slug on product types (#19251) by @wcislo-saleor in https://github.com/saleor/saleor/pull/19276 - Fixed KeyError when resolving channel for channel-agnostic account events (#19253) by @wcislo-saleor in https://github.com/saleor/saleor/pull/19265 - Improved Sentry's PII scrubber by @wcislo-saleor in https://github.com/saleor/saleor/pull/19273 - Fixed saving language code in customerUpdate mutation (#19254) by @wcislo-saleor in https://github.com/saleor/saleor/pull/19261 Security fixes: - Bumped Django to v5.2.15 to fix the following (by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19283): - CVE-2026-6873: Signed cookie salt namespace collision in `django.http.HttpRequest.get_signed_cookie` - CVE-2026-7666: Potential unencrypted email transmission via STARTTLS in the SMTP backend - CVE-2026-8404: Potential exposure of private data via case-sensitive `Cache-Control` directives in `UpdateCacheMiddleware` - CVE-2026-35193: Potential exposure of private data via missing `Vary: Authorization` in `UpdateCacheMiddleware` - CVE-2026-48587: Potential exposure of private data via whitespace padding in `Vary` header Learn more at https://www.djangoproject.com/weblog/2026/jun/03/security-releases/ - Bumped urllib3 to v2.7.0 to fix the following (by @NyanKiyoshi in https://github.com/saleor/saleor/pull/19283): - CVE-2026-44432: Decompression-bomb safeguards bypassed in parts of the streaming API - CVE-2026-44431: Sensitive headers forwarded across origins in proxied low-level redirects Learn more at https://github.com/urllib3/urllib3/releases/tag/2.7.0 **Full Changelog**: https://github.com/saleor/saleor/compare/3.23.7...3.23.8
← Older Version Saleor 3.22.52