CVE-2026-16212 | awesto django-shop up to 1.2.4 Purchase Stock shop/models/inventory.py race condition (Issue 888)

July 18, 2026 Yanac

A vulnerability marked as critical has been reported in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition.

This vulnerability is uniquely identified as CVE-2026-16212. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More