Skip to content
OpenAdvisories

Package · npm

@shopify/koa-shopify-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2020-8176

    Cross-site scripting in @shopify/koa-shopify-auth

    A cross-site scripting vulnerability exists in koa-shopify-auth v3.1.61-v3.1.62 that allows an attacker to inject JS payloads into the `shop` parameter on the `/shopify/auth/enable_cookies` endpoint.

    @shopify/koa-shopify-auth npm