Could you please check whether the React version used by Shopify is affected by the vulnerability CVE-2025-55182 (React2Shell)?

Shopify CLI and Libraries
1

Could you please check whether the React version used by Shopify is affected by the vulnerability CVE-2025-55182 (React2Shell)?

2

To clarify, React2Shell affected React Server Components, not client side React.

Components like React Polaris would be unaffected, that is a clientside library.

If you’re using the Remix template to host your app, then you’ll need to check for the React server DOM package and make sure it’s patched.