CVE-2026-4547 — mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error

CVE-2026-4547

mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error PUBLISHED

Description (CNA)

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.

Affected (CNA)

Vendor / product	Versions
mickasmt / next-saas-stripe-starter	affected 1.0.0

CWE

CWE-840

References

https://vuldb.com/?id.352374
https://vuldb.com/?ctiid.352374
https://vuldb.com/?submit.774804

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.