Reaction Commerce · Vulnerability Disclosure

Reaction Commerce Vulnerability Disclosure

Vulnerability disclosure

Reaction Commerce publishes a vulnerability disclosure policy for reporting security issues. A machine-readable /.well-known/security.txt is served. A dedicated security contact is published.

CompanyEnterpriseCommerceeCommerceHeadless CommerceOpen SourceGraphQLStorefrontRetail
Program: security.txt present

Disclosure Policy

Policy
https://mailchimp.com/about/security/#Responsible_Disclosure

Security Contact

Contact
https://mailchimp.com/about/security/#Responsible_Disclosure

Source

Vulnerability Disclosure

reaction-commerce-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://mailchimp.com/.well-known/security.txt
notes: >-
  Reaction Commerce is now Mailchimp Open Commerce; the original
  reactioncommerce.com domain no longer resolves. The active responsible
  disclosure surface is Mailchimp's, referenced from the mailchimp.com
  /.well-known/security.txt Contact field.
policy:
  - https://mailchimp.com/about/security/#Responsible_Disclosure
contact:
  - https://mailchimp.com/about/security/#Responsible_Disclosure
evidence:
  - source: well-known/reaction-commerce-security.txt
    kind: security.txt
    detail: "Contact: https://mailchimp.com/about/security/#Responsible_Disclosure"
  - source: https://mailchimp.com/about/security/
    kind: responsible-disclosure-page
    status: 200