ecommerce-platform

https://leapgraph.com/graphql-api-security

This article mentions several add-on packages that Reaction may want to use. This issue is simply to investigate whether these vulnerabilities are present and try adding the packages to solve them.

• Update Third Party library: lib/web/jquery/jquery-ui-timepicker-addon
• Confirm that is used across Magento (adminhtml/frontend)
• Check which is the latest version available and replace the current one.

Currently, catch block is the same for both methods in useForgotPasswordFactory (https://github.com/vuestorefront/vue-storefront/pull/5971/files/0e001721be751b0b0130915023ea0867722e1065#diff-89077440c1264480ee6ffbbcfb08d6c64c9881bea61ebbd8e0e5d260085b66ad):

err.message = err?.graphQLErrors?.[0]?.message || err.message;

Let's create an external function that takes care of that a

If usage tracking is not enabled in WooCommerce then the cron event woocommerce_tracker_send_event that is run daily is left with no action.

Should the cron event be deleted if usage tracking is disabled?

https://woocommerce.com/usage-tracking/

Sylius version affected: v1.4.4

Description

Sylius says the category is used and cannot be removed, when we try to remove an empty category.

We figured out that we had some products with the taxon as "Main Taxon".

Steps to reproduce

1. Add a taxon, keep it empty of products.
2. Update a product to use the newly created taxon as Main taxon.
3. Try to remove the taxo

Describe the bug

Previously reported here: PrestaShop/PrestaShop#25822 (comment)
In the BO > Customers > View customer page, in the Addresses block ( and Vouchers block),
If we delete the last address

i18n-tasks gem now comes with the following post-install message:

Post-install message from i18n-tasks:
# Install default configuration:
cp $(bundle exec i18n-tasks gem-path)/templates/config/i18n-tasks.yml config/
# Add an RSpec for missing and unused keys:
cp $(bundle exec i18n-tasks gem-path)/templates/rspec/i18n_spec.rb spec/

It's a good opportunity to follow these instru

Improve the tier prices feature - add info like "Buy 2 in x.xx$ and save x%"

Is your feature request related to a problem? Please describe.
Currently, if the developer wants to register a new admin account, it doesn't let it do that because sendgrid API keys are needed. Remove this dependency for local, and switch to using an identical emailService which uses Nodemailer (Gmail option preferred) since Nodemailer is free. Maybe feature flag this property

**Describe

Description (*)

If OpenMage makes use of a composer dependency, which is noted as vulnerable via https://github.com/FriendsOfPHP/security-advisories, we should get a notice.

I dont think we need the check on every PullRequest, but at least a weekly check on our main branches would be good. and on Relea

Type: minor

Describe the bug
After adding a new account address, the screen goes blank you appear to be logged out, but when you refresh the page, the address is there and you are still logged in.

To Reproduce
Steps to reproduce the behavior:

1. Go to storefront
2. Log in
3. Click user name in upper right > Profile
4. Add a new address.
5. When you submit the form, see the