CVE-2026-4547 in next-saas-stripe-starterinfo

Summary

by MITRE • 03/22/2026

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may be initiated remotely.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

VulDB

Disclosure

03/22/2026

Moderation

accepted

CPE

ready

EPSS

0.00038

KEV

no

Activities

very low

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!