Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@keystone-6/core

npm

View on github.com · View on npmjs.org

Security Advisories for @keystone-6/core in npm

Low
about 1 month ago

Keystone: GraphQL API Endpoint Lacks Query Depth Limits GSA_kwCzR0hTQS00NWpxLWM4eG0tamZ3Oc4ABYCU

npm @keystone-6/core
Moderate
4 months ago

@keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany (CVE-2025-46720 incomplete fix) GSA_kwCzR0hTQS1jZ2NnLXE5amgtNXByMs4ABT36

npm @keystone-6/core
Low
about 1 year ago

Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields GSA_kwCzR0hTQS1oZzltLTY3bW0tN3BnM84ABHej

npm @keystone-6/core
Moderate
almost 3 years ago

When `ui.isAccessAllowed` is `undefined`, the `adminMeta` GraphQL query is publicly accessible GSA_kwCzR0hTQS05Y3ZjLXY3d20tOTkyY84AA1Uh

npm @keystone-6/core
Potential
Moderate
about 3 years ago

@keystone-6/auth Open Redirect vulnerability GSA_kwCzR0hTQS1qcXhyLXZqdnYtODk5bc4AAz2U

npm @keystone-6/auth
Low
about 3 years ago

@keystone-6/core's bundled cuid package known to be insecure GSA_kwCzR0hTQS01ZnA2LTR4dzMteHFxM84AAzyU

npm @keystone-6/core
Critical
over 3 years ago

@keystone-6/core's NODE_ENV defaults to development with esbuild GSA_kwCzR0hTQS0yNW14LTJteG0tNjM0M84AAvsH

npm @keystone-6/core
Critical
over 3 years ago

Field-level access-control bypass for multiselect field GSA_kwCzR0hTQS02bWhyLTUybXYtNnY2Zs4AAvaQ

npm @keystone-6/core
Potential
High
over 4 years ago

Reflected cross-site scripting (XSS) vulnerability GSA_kwCzR0hTQS1ocmd4LTdqNnYteGo4Ms0hSw

npm @keystone-next/auth, @keystone-6/auth
Potential
High
over 8 years ago

Cross-Site Request Forgery (CSRF) in keystone MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXE0M2MtZzJnNy02Z3hq

npm keystone
Potential
Moderate
over 8 years ago

Cross-Site Scripting in keystone MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdjdjYtZ3Z4My1tNTRt

npm keystone
Potential
High
over 8 years ago

Keystone is vulnerable to CSV injection MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTY0OTQtdjlmcS1mZ3Ey

npm keystone
Potential
Moderate
over 8 years ago

Cross-Site Scripting in keystone MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTdxY3gtam1yYy1oMnJy

npm keystone

Filter by Severity

Moderate 5 Low 3 High 3 Critical 2