Security

Report a vulnerability

SECURITY.md

Shopify Security Policy

Shopify's Bug Bounty program rewards researchers for discovering security vulnerabilities.

You can submit a report via HackerOne.

Insufficient input sanitization in ejson2env
GHSA-2c47-m757-32g6 published May 21, 2025 by greatscotty

Moderate

Learn more about advisories related to Shopify/ejson2env in the GitHub Advisory Database