安全

Report a vulnerability

SECURITY.md

Shopify 安全 Policy

Shopify's Bug Bounty program rewards researchers for discovering security vulnerabilities.

You can submit a report via HackerOne.

EJSON may leave array string values plaintext after a nested underscore-prefixed key
GHSA-9xxr-9j7p-mr7f published Aug 7, 2026 by ss-shopify

Low

Learn more about advisories related to Shopify/ejson in the GitHub Advisory Database