Spree Commerce

v5.4.4 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 6d Productivity & Wikis

✓ No known CVEs patched

This release patches 1 known CVE

Topics

b2b-commerce e-commerce ecommerce ecommerce-api ecommerce-framework ecommerce-platform

+8 more

headless headless-commerce headless-ecommerce marketplace multi-tenant multi-vendor multi-vendor-ecommerce spree-commerce

Summary

AI summary

Security patch GHSA-4825-p4xm-pcf2 and two additional hardening improvements

Full changelog

This release includes a security patch for GHSA-4825-p4xm-pcf2 plus two hardening security improvements

bundle update

Full Changelog: https://github.com/spree/spree/compare/v5.4.3...v5.4.4

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Spree Commerce

Get notified when new releases ship.

About Spree Commerce

Spree is a complete, modular & API-driven open source e-commerce solution for Ruby on Rails.