Vulnerabilities in Shopify

7 results

CVE-2025-48069MEDIUMejson2env has insufficient input sanitizationEPSS 1.3%CVE-2022-29230MEDIUMPotential cross-site scripting (XSS) vulnerability in HydrogenEPSS 0.7%CVE-2025-53623HIGHJob Iteration API is vulnerable to OS Command Injection attack through its CsvEnumerator classEPSS 0.7%CVE-2026-39862MEDIUMTophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat LinkEPSS 0.6%CVE-2026-34060HIGHRuby LSP has arbitrary code execution through branch settingEPSS 0.5%CVE-2024-45036MEDIUMImproper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat LinkEPSS 0.3%CVE-2025-30221MEDIUMPitchfork HTTP Request/Response Splitting vulnerabilityEPSS 0.3%