Skip to content
OpenAdvisories

Package · npm

graphql-scalars

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-115887

    graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

    GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneN…

    graphql-hive graphql-scalars langfuse-3-worker graphql-scalars Wolfi npm