Skip to content
OpenAdvisories

Product · Shopify

hydrogen

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.3
    CVE-2022-29230

    Potential cross-site scripting (XSS) vulnerability in Hydrogen

    Hydrogen is a React-based framework for building dynamic, Shopify-powered custom storefronts. There is a potential Cross-Site Scripting (XSS) vulnerability where an arbitrary user is able to execute scripts on pages that are built with Hydrogen. This affects …

    Shopify hydrogen @shopify/hydrogen npm