Skip to content
OpenAdvisories

Package · npm

@keystone-6/core

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10802

    keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption

    A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumpti…

    keystonejs keystone @keystone-6/core npm
  • Medium 4.3
    CVE-2026-33326

    @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany

    Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix f…

    keystonejs keystone @keystone-6/core npm