TO
Product
tophat
by Shopify · last CVE Apr 8, 2026
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add tophat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39862
8.8
1%
Apr 8
Tophat has a Command Injection Vulnerability When Accessing a Maliciously Crafted Tophat Link
Affected: < 2.5.1
CVE-2024-45036
4.3
0%
Aug 26
Improper Access Control Vulnerability When Accessing a Maliciously Crafted Tophat Link
Affected: < 1.10.0
Showing 2