Inventory overselling via non-atomic stock deduction

Race condition in Awesto django-SHOP 1.2.0 through 1.2.4 allows remote authenticated users to oversell stock via concurrent checkout requests. The checkout path reads and deducts stock without locking the inventory row or performing an atomic conditional update. Exploitation requires two authenticated customers to race checkout for limited stock, producing excess orders and inconsistent inventory counts.