Vulnerabilities in Shopify

8 results

Vexday analysis

Shopify apresenta 7 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida ou classificada como crítica, com a fraqueza dominante sendo injeção de comando (CWE-78). O portfólio de risco está estável, sem novos problemas revelados nos últimos 90 dias, indicando baixa urgência imediata.

CVE-2025-48069MEDIUMejson2env has insufficient input sanitizationEPSS 1.3%CVE-2022-29230MEDIUMPotential cross-site scripting (XSS) vulnerability in HydrogenEPSS 0.8%CVE-2025-53623HIGHJob Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator classEPSS 0.7%CVE-2026-39862MEDIUMTophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat LinkEPSS 0.6%CVE-2026-34060HIGHRuby LSP has arbitrary code execution through branch settingEPSS 0.5%CVE-2024-45036MEDIUMImproper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat LinkEPSS 0.3%CVE-2025-30221MEDIUMPitchfork HTTP Request/Response Splitting vulnerabilityEPSS 0.3%CVE-2026-48122MEDIUMWorkspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extensionEPSS 0.1%