CVE-2026-4547 — mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of…
Published: 2026-03-22 · CVSS: 5.3 · CVSS 4.0
A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7