shopify
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 22 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 2, 2020 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →React Router: Unauthenticated Denial of Service via Inefficient Route Matching
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
React Router: Open redirect can lead to XSS
React Router: Cross-site Scripting is Possible due to Missing RSCErrorHandler Protocol Validation (Incomplete fix for CVE-2026-53667)
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
React Router vulnerable to DoS via unbounded path expansion in __manifest endpoint
React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCE
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretation
React Router vulnerable to Denial of Service via reflected user input in single-fetch
React Router vulnerable to XSS in unstable RSC redirect handling via javascript: redirect targets
Monitor shopify in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.