Skip to content
OpenAdvisories

Package · RubyGems

graphiti

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-33286

    Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names

    Graphiti is a framework that sits on top of models and exposes them via a JSON:API-compliant interface. Versions prior to 1.10.2 have an arbitrary method execution vulnerability that affects Graphiti's JSONAPI write functionality. An attacker can craft a mali…

    graphiti-api graphiti graphiti RubyGems