system
Identify the affected product in <CVE-2020-26223>.
user
Which product is affected by <CVE-2020-26223>?
assistant
The affected product is spree and version: >= 3.7.0, < 3.7.13, >= 4.0.0, < 4.0.5, >= 4.1.0, < 4.1.12.