@keystone-6/core vulnerabilities (npm)
8 vulnerabilities.
-
@keystone-6/corenpm Keystone: `graphql.maxTake` bypass with negative `take` 7.5 High -
@keystone-6/corenpm keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption 5.3 Medium -
@keystone-6/corenpm @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany 4.3 Medium -
@keystone-6/corenpm Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields 3.1 Low -
@keystone-6/corenpm Conditionally missing authorization in @keystone-6/core 3.7 Low -
@keystone-6/corenpm @keystone-6/core's bundled cuid package known to be insecure No score -
@keystone-6/corenpm NODE_ENV in Keystone defaults to development with esbuild 9.8 Critical -
@keystone-6/corenpm @keystone-6/core vulnerable to field-level access-control bypass for multiselect field 9.1 Critical