CVE-2026-4547

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.

• CWE-840

• https://vuldb.com/?ctiid.352374
• https://vuldb.com/?id.352374
• https://vuldb.com/?submit.774804

Published

Mar 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45464Improper neutralization of input during web page generation …5.4
• CVE-2026-45465Improper neutralization of input during web page generation …5.4
• CVE-2026-45466Heap-based buffer overflow in Microsoft Office Word allows a…3.3
• CVE-2026-45467Improper neutralization of input during web page generation …5.4
• CVE-2026-45468Improper neutralization of input during web page generation …5.4
• CVE-2026-45469Integer underflow (wrap or wraparound) in Microsoft Office E…7.8
• CVE-2026-45471Untrusted pointer dereference in Microsoft Office Word allow…7.8
• CVE-2026-45472Use after free in Microsoft Office allows an unauthorized at…8.4
• CVE-2026-45474Use after free in Microsoft Office allows an unauthorized at…8.4
• CVE-2026-45475Heap-based buffer overflow in Microsoft Office allows an una…7.8
• CVE-2026-45476Use after free in Linux MANA Driver allows an authorized att…8.2
• CVE-2026-45479Improper neutralization of input during web page generation …5.4