OSS Support Hub / CMS

Python CMS BSD-3-Clause Latest: 3.22.59

Saleor

High-performance open source e-commerce platform built with Python, Django, and GraphQL

Project Health at a Glance

Live data from GitHub and PyPI, updated daily.

23.1K+101
GitHub Stars
📦
3.22.59
Latest Release · 3 days ago
🔄
1d
Avg. Release Cadence
🐛
237
Open Issues
📅
Yesterday
Last Commit
🔒
10
Active CVEs

Data last fetched: 2026-07-18

Known Vulnerabilities

10 active CVEs reported via OSV.dev

Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions

Published: 2023-03-02 Fixed in: 3.1.48

Mirumee Saleor CSRF Protection Disabled

Published: 2022-05-24 Fixed in: 2.8.0

saleor Missing Authorization vulnerability

Published: 2022-03-12 Fixed in: 3.1.2

Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Published: 2024-03-28 Fixed in: 3.14.61

Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions

Published: 2023-03-03 Fixed in: 3.1.48

Missing Authentication for Critical Function in Saleor

Published: 2021-07-28 Fixed in: 2.9.1
PYSEC-2026-1890 CVSS_V3

Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

Published: 2026-07-07 Fixed in: 3.14.61
PYSEC-2026-746 CVSS_V3

saleor Missing Authorization vulnerability

Published: 2026-07-02 Fixed in: 3.1.2
PYSEC-2026-747 CVSS_V3

Missing Authentication for Critical Function in Saleor

Published: 2026-07-02 Fixed in: 2.9.1
PYSEC-2026-915 CVSS_V3

Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions

Published: 2026-07-07 Fixed in: 3.1.48

Alternatives to Saleor

Other CMS projects in the Python ecosystem worth evaluating.

Support Options for Saleor

Commercial Support from DepKeep

Get SLA-backed support, security patches, and direct access to senior engineers for Saleor — without relying on volunteer maintainers.