Skip to content
OpenAdvisories

Vendor

keystonejs

10 known vulnerabilities.

Products

keystone 8 keystone-5 1 keystonejs/keystone 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-39382

    NODE_ENV in Keystone defaults to development with esbuild

    Keystone is a headless CMS for Node.js — built with GraphQL and React.`@keystone-6/core@3.0.0 || 3.0.1` users that use `NODE_ENV` to trigger security-sensitive functionality in their production builds are vulnerable to `NODE_ENV` being inlined to `"developmen…

    keystonejs keystone @keystone-6/core npm
  • Critical 9.1
    CVE-2022-39322

    @keystone-6/core vulnerable to field-level access-control bypass for multiselect field

    @keystone-6/core is a core package for Keystone 6, a content management system for Node.js. Starting with version 2.2.0 and prior to version 2.3.1, users who expected their `multiselect` fields to use the field-level access control - if configured - are vulne…

    keystonejs keystone @keystone-6/core npm