Regarding the PHP vulnerabilities disclosed on October 21, 2026 (CVE-2026-109618 and CVE-2026-109619), we have reviewed their impact on all of our Shopify apps: Japan Order CSV, Delete Me, Mockingbird, and B2E, our employee sales app. None of these apps use PHP, so they are not affected by these vulnerabilities. Merchants using our apps do not need to take any action, such as updating or changing settings.
We continuously monitor published vulnerability information and will notify our users promptly if any impact is expected. If you have any questions about this matter, please contact the support desk for the app you use.
The Flagship Glossary explains the vocabulary of commerce development on Shopify and beyond, for merchants, developers, and project managers. Each term is covered from three angles: its definition, the background that makes it matter, and how it shows up in Flagship's work.
Category
Category: Mirakl4 termsShow all terms