How many shopify tophat CVEs are in CISA KEV?

None of shopify tophat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of shopify tophat are affected?

20 distinct shopify tophat versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in shopify tophat CVEs?

shopify tophat's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

What is the average severity of shopify tophat CVEs?

The average CVSS base score across shopify tophat's scored CVEs is 5.3.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

shopify

2 CVEs

shopify tophat Vulnerabilities

Name: shopify tophat vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for tophat by shopify.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

5.3

Avg CVSS

2024–2026

Last updated April 8, 2026

Overview

shopify tophat has 2 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 5.3.

This page aggregates every publicly disclosed vulnerability (CVE) affecting shopify tophat, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of shopify tophat's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of shopify tophat's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No shopify tophat CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every shopify tophat version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.9.02 CVEs
1.10.01 CVE
1.11.01 CVE
1.11.11 CVE
2.0.01 CVE
2.0.11 CVE
2.0.21 CVE
2.1.01 CVE
2.1.11 CVE
2.1.21 CVE
2.2.01 CVE
2.2.11 CVE
2.3.01 CVE
2.4.01 CVE
2.5.01 CVE

Version ranges

< 1.10.01 CVE
< 2.5.11 CVE

Fixed in

2.5.11 CVE
28cd6836a5370d62f41c9ae9f7c619db1071a0591 CVE
6491d26ec8f2189e702708d12346c5738847235e1 CVE

Find a version

2 CVEs

Sort

Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
CVE-2026-39862
Patch
CWE-78
Medium · CVSS 6.3
EPSS 0.6% (43th pct)2026-04-08
Medium vulnerability · 2024-08-26
CVE-2024-45036
Patch
CWE-287
Medium · CVSS 4.3
EPSS 0.3% (19th pct)2024-08-26

Common weakness types

The CWE weakness categories most often found in shopify tophat CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many shopify tophat CVEs were published each year.

2024

1

2026

1

Other shopify products

Browse vulnerabilities for other products by shopify.

react-router11 CVEs remix-run/react4 CVEs ejson2env1 CVEs github.com/Shopify/ejson2env1 CVEs github.com/Shopify/ejson2env/v21 CVEs hydrogen1 CVEs job-iteration1 CVEs koa-shopify-auth1 CVEs

All shopify vulnerabilities

Frequently asked questions

Common questions about shopify tophat vulnerabilities.

How many CVEs does shopify tophat have?: shopify tophat has 2 published CVE records since 2024.
How many shopify tophat CVEs are in CISA KEV?: None of shopify tophat's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for shopify tophat vulnerabilities?: No shopify tophat CVEs currently have a tracked public exploit in this dataset.
Which versions of shopify tophat are affected?: 20 distinct shopify tophat versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in shopify tophat CVEs?: shopify tophat's CVEs most often map to these CWE weakness types: CWE-287 (Improper Authentication), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
What is the average severity of shopify tophat CVEs?: The average CVSS base score across shopify tophat's scored CVEs is 5.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track shopify tophat vulnerabilities

Monitor new shopify tophat vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing