CVE-2026-16212

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-16212

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16212.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-16212

Published

2026-07-19T03:45:08.520Z

Modified

2026-07-21T03:41:43.905801178Z

Severity

1.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

awesto django-shop Purchase Stock inventory.py race condition

Details

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is told to be difficult. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/16xxx/CVE-2026-16212.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "1.2.0"
                },
                {
                    "last_affected": "1.2.0"
                },
                {
                    "introduced": "1.2.3"
                },
                {
                    "last_affected": "1.2.3"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-362"
    ]
}

References

Affected packages

Git / github.com/awesto/django-shop

Affected ranges

Type

GIT

Repo

https://github.com/awesto/django-shop

Events

Introduced

395ed972c9193b1bf77ac6bf45e9ccc006aa9737

Last affected

c9ef66e3376df09f741a1010b67e1b0f2f5d37cb

Database specific

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "1.2.1"
        },
        {
            "last_affected": "1.2.1"
        },
        {
            "introduced": "1.2.2"
        },
        {
            "last_affected": "1.2.2"
        },
        {
            "introduced": "1.2.4"
        },
        {
            "last_affected": "1.2.4"
        }
    ]
}

Affected versions

1.*

1.2.1

1.2.2

1.2.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-16212.json"