Skip to content
OpenAdvisories

Product · ardatan

graphql-mesh

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2025-27097

    Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation

    GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the …

    ardatan graphql-mesh @graphql-mesh/runtime npm
  • Medium 5.8
    CVE-2025-27098

    Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler in graphql-mesh

    GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in…

    ardatan graphql-mesh @graphql-mesh/http @graphql-mesh/cli npm