If you discover a security vulnerability in react-storefront please disclose it via our huntr page. Information about bounties, CVEs, response times and past reports are all there.

Thank you for improving the security of react-storefront.