← Back

Shopify

shopify

21 CVEs • 10 products

Products (10)

Click to collapse
Toggle
React Router
react-router
16 CVEs
Remix Run/react
remix-run/react
4 CVEs
React Router/node
react-router/node
1 CVE
Remix Run/deno
remix-run/deno
1 CVE
Remix Run/node
remix-run/node
1 CVE
Koa Shopify Auth
koa-shopify-auth
1 CVE
Hydrogen
hydrogen
1 CVE
Tophat
tophat
1 CVE
Ruby Lsp
ruby_lsp
1 CVE
Remix Run/server Runtime
remix-run/server-runtime
1 CVE

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-8176
1Shopify
1Koa Shopify Auth
Jun 17, 2026
Jul 2, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.