Skip to content
OpenAdvisories

Vendor

keystonejs

10 known vulnerabilities.

Products

keystone 8 keystone-5 1 keystonejs/keystone 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-10802

    keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption

    A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumpti…

    keystonejs keystone @keystone-6/core npm
  • Medium 4.3
    CVE-2026-33326

    @keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany

    Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix f…

    keystonejs keystone @keystone-6/core npm
  • Medium 6.1
    CVE-2023-34247

    @keystone-6/auth Open Redirect vulnerability

    Keystone is a content management system for Node.JS. There is an open redirect in the `@keystone-6/auth` package versions 7.0.0 and prior, where the redirect leading `/` filter can be bypassed. Users may be redirected to domains other than the relative host, …

    keystonejs keystone @keystone-6/auth npm