[ Vendor · 1 CVEs ]
Shopify
CVEs affecting Shopify published in the last 30 days, plus any Shopify CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-63414 | 30 Oct 2026 | CVSS 7.6 | Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected appsShopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticated controllers can expose a… | Fix |