Known Vulnerabilities for products from Shopify
Listed below are 19 of the newest known vulnerabilities associated with the vendor "Shopify".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-57748 json | Not Provided | 2026-07-02 | 2026-07-02 | |
| CVE-2026-55685 json | React Router is a router for React. In versions 7.0.0 through 7.17.0, the manifest endpoint could be accessed via unauthentic... | Not Provided | 2026-07-27 | 2026-08-03 |
| CVE-2026-55575 json | Not Provided | 2026-07-08 | 2026-07-09 | |
| CVE-2026-53669 json | React Router is a router for React. Versions 6.0.0 through 7.17.0 are vulnerable to Open Redirtect through use of backslashes... | Not Provided | 2026-07-27 | 2026-08-03 |
| CVE-2026-53668 json | React Router is a router for React. In versions 6.30.2 through 6.30.4 and 7.9.6 through 7.12.0, applications that allow open ... | Not Provided | 2026-07-27 | 2026-08-03 |
| CVE-2026-53667 json | React Router is a router for React. In versions 7.11.0 through 7.17.0, the RSCErrorHandler is missing protocol validation, al... | Not Provided | 2026-07-27 | 2026-08-03 |
| CVE-2026-53666 json | React Router is a router for React. In versions 6.4.0 through 7.17.0, if application code was written in a way that allows at... | Not Provided | 2026-07-27 | 2026-08-03 |
| CVE-2026-45617 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-45357 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-44646 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-44645 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-44644 json | Not Provided | 2026-06-17 | 2026-06-18 | |
| CVE-2026-42342 json | React Router is a router for React. In versions 7.0.0 through 7.14.x of react-router and versions 2.10.0 through 2.17.4 of @r... | Not Provided | 2026-06-02 | 2026-07-21 |
| CVE-2026-42211 json | React Router is a router for React. In versions 7.0.0 through 7.14.1, when using Framework Mode, a combination of steps could... | Not Provided | 2026-06-02 | 2026-07-21 |
| CVE-2026-41311 json | Not Provided | 2026-05-09 | 2026-05-11 | |
| CVE-2026-40181 json | React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7.0 through 6.30.3, certain URLs passed to the red... | Not Provided | 2026-06-02 | 2026-08-04 |
| CVE-2026-39862 json | Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted toph... | Not Provided | 2026-04-08 | 2026-07-24 |
| CVE-2026-34077 json | React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Compone... | Not Provided | 2026-06-02 | 2026-07-22 |
| CVE-2026-34060 json | Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp... | Not Provided | 2026-03-31 | 2026-06-03 |
| CVE-2026-33245 json | React Router is a router for React. In versions 7.7.0 through 7.13.1, when using React Router's unstable React Server Compone... | Not Provided | 2026-06-02 | 2026-07-22 |
Known software with vulnerabilities from Shopify
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Shopify | Koa-shopify-auth | 3.1.10 |