S
Vendor security profile
shopify
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical1
CISA KEV0
Public exploit0
Patch rate%35
Avg. CVSS7.0
12-month vulnerability rate
0
0
4
0
0
1
0
6
5
1
0
0
CVE KEV
CVE severity distribution
17toplam CVE
Critical1 (6%)
High8 (47%)
Medium8 (47%)
Patch and exploitation view
%35
Verified patch
%0
CISA KEV
%0
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
5.4
CVE-2026-48122
Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension
S
Patch status unknownEPSS %0
7.5
CVE-2026-55685
Uncontrolled resource consumption in Shopify React Router
S
Patch verifiedEPSS %1
6.1
CVE-2026-53669
Open redirect in Shopify React Router
S
Patch verifiedEPSS %0
6.9
CVE-2026-53668
Cross-site scripting in Shopify React Router
S
Patch verifiedEPSS %0
6.1
CVE-2026-53667
Cross-site scripting in Shopify React Router
S
Patch verifiedEPSS %0
6.1
CVE-2026-53666
Vulnerability in Shopify React Router
S
Patch verifiedEPSS %0
6.6
CVE-2026-40181
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
R
Patch verifiedEPSS %0
7.5
CVE-2026-42342
Uncontrolled resource consumption in Shopify React Router
S
Patch status unknownEPSS %0
8.1
CVE-2026-42211
Deserialization of untrusted data in Shopify React Router
S
Patch status unknownEPSS %1
7.5
CVE-2026-34077
Resource allocation without limits in Shopify React Router
S
Patch status unknownEPSS %0