Spree Commerce

Open-source headless ecommerce platform with a REST API and Next.js storefront

Alternative to: Shopify, Magento, WooCommerce, Salesforce Commerce Cloud

About Versions (100)

v5.2.8

2026-05-19

This is a security patch release addressing one moderate security vulnerability:

https://github.com/advisories/GHSA-p6pv-q7rc-g4h9 CSV Formula Injection in CSV exports, Customer CSV affected, as this one uses information from signups (Medium severity)

bundle update

Full Changelog: https://github.com/spree/spree/compare/v5.2.7…v5.2.8