Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-6fw5-9hq8-w87g
  • npm/@graphql-tools/executor-legacy-ws
 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor 5 hours ago
  • Fix available
  • Severity - 7.4 (High)
GHSA-7mx3-vvmw-hjmv
  • npm/@graphql-tools/utils
 GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` 5 hours ago
  • Fix available
  • Severity - 8.2 (High)
MAL-2026-16086
  • npm/graphql-js-client-transform
 Malicious code in graphql-js-client-transform (npm) 09 Sep
  • No fix available
MAL-2026-16063
  • npm/alloy-graphql
 Malicious code in alloy-graphql (npm) 09 Sep
  • No fix available
MAL-2026-14210
  • npm/sui-graphql-rpc
 Malicious code in sui-graphql-rpc (npm) 19 Aug
  • No fix available
MAL-2026-14121
  • npm/sui-move-graphql
 Malicious code in sui-move-graphql (npm) 18 Aug
  • No fix available
MAL-2026-13475
  • npm/sui-graphql-client
 Malicious code in sui-graphql-client (npm) 06 Aug
  • No fix available
MAL-2026-11756
  • npm/@ornikar/graphql-config
 Malicious code in @ornikar/graphql-config (npm) 04 Aug
  • No fix available
MAL-2026-4590
  • npm/json-to-simple-graphql-schema
 Malicious code in json-to-simple-graphql-schema (npm) 25 May
  • No fix available
GHSA-hp5w-3hxx-vmwf
  • npm/@payloadcms/graphql
  • npm/payload
 Payload: Pre-Authentication Account Takeover via Parameter Injection in Password Recovery 01 Apr
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-g9c2-gf25-3x67
  • npm/@tinacms/graphql
 @tinacms/graphql's `FilesystemBridge` Path Validation Can Be Bypassed via Symlinks or Junctions 01 Apr
  • Fix available
  • Severity - 7.1 (High)
GHSA-g87c-r2jp-293w
  • npm/@tinacms/graphql
 @tinacms/graphql's Media Endpoints Can Escape the Media Root via Symlinks or Junctions 01 Apr
  • Fix available
  • Severity - 7.1 (High)
GHSA-v9p7-gf3q-h779
  • npm/@tinacms/graphql
 @tinacms/graphql has Path Traversal that leads to overwrite of arbitrary files 30 Mar
  • Fix available
  • Severity - 8.1 (High)
MAL-2026-1444
  • npm/graphql-request-dom
 Malicious code in graphql-request-dom (npm) 16 Mar
  • No fix available
MAL-2026-1540
  • npm/typescript-type-graphql
 Malicious code in typescript-type-graphql (npm) 16 Mar
  • No fix available
GHSA-2238-xc5r-v9hj
  • npm/@tinacms/graphql
 @tinacms/graphql has a Path Traversal issue 12 Mar
  • Fix available
  • Severity - 6.3 (Medium)
Load more...