tophat vulnerabilities

1 known vulnerability in tophat from Shopify. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  tophat: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-39862Apr 8, 2026Shopify

  Tophat is a mobile applications testing harness. Prior to 2.5.1, Tophat is affected by remote code execution via crafted tophat:// or http://localhost:29070 URLs. The arguments query parameter flows unsanitized from URL parsing through to /bin/bash -c executio