Security

Report a vulnerability

SECURITY.md

Shopify Security Policy

Shopify's Bug Bounty program rewards researchers for discovering security vulnerabilities.

You can submit a report via HackerOne.

Arbitrary code execution through branch setting in ruby-lsp
GHSA-c4r5-fxqw-vh93 published Mar 25, 2026 by vinistock

Moderate

Learn more about advisories related to Shopify/ruby-lsp in the GitHub Advisory Database