Skip to content
OpenAdvisories

Vendor

graphql-hive

2 known vulnerabilities.

Products

graphql-modules 1 graphql-scalars 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-115887

    graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

    GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts uses ambiguous nested digit quantifiers that backtrack exponentially when a PhoneN…

    graphql-hive graphql-scalars langfuse-3-worker graphql-scalars Wolfi npm
  • High 8.7
    CVE-2026-23735

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in graphql-modules

    GraphQL Modules is a toolset of libraries and guidelines dedicated to create reusable, maintainable, testable and extendable modules out of your GraphQL server. From 2.2.1 to before 2.4.1 and 3.1.1, when 2 or more parallel requests are made which trigger the …

    graphql-hive graphql-modules graphql-modules npm