Known Vulnerabilities for Shopify App by Shopify
Listed below are 6 of the newest known vulnerabilities associated with "Shopify App" by "Shopify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-106120 json | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnl... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-92527 json | A vulnerability has been found in chatwoot up to 4.17.1. This impacts an unknown function of the file callbacks_controller.rb... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-69222 json | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, the join filter in src/... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-63414 json | Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticated con... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-61556 json | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. From 10.26.0 until 10.27.1, the strip_htm... | Not Provided | 2026-08-19 | 2026-08-25 |
| CVE-2026-45618 json | LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary ... | Not Provided | 2026-08-11 | 2026-08-13 |