[HIGH] Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component

PKSA-d6w1-f12g-cj15 CVE-2026-56829 GHSA-g3f9-g5vj-p62f

Affected package: shopper/framework

Affected version: <2.9.2

Reported by:
GitHub