All vulnerabilities

Servers and applications

GHSA-2676-hc74-gg7v

Duplicate orders can be created from a single cart through a race condition in free-order checkout

Severity
High 7.5
Published
9 Nov 2026
Last changed
9 Nov 2026
Added to UpHeron
9 Nov 2026
Fixed in
8.2.9, 9.2.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
PrestaShopServers and applications · github:prestashop/prestashop
  • From 8.0.0 before 8.2.9
  • From 9.0.0 before 9.2.1

References