Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

@keystone-6/core

npm

Keystone-6 is the latest version of Keystone. To get help with this package join the conversation in [Slack](https://community.keystonejs.com/), or [Github](https://github.com/keystonejs/keystone/).

View on github.com · View on npmjs.org

Low Security Advisories for @keystone-6/core in npm Clear Filters

Low
6 months ago

Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields GSA_kwCzR0hTQS1oZzltLTY3bW0tN3BnM84ABHej

npm @keystone-6/core
Low
over 2 years ago

@keystone-6/core's bundled cuid package known to be insecure GSA_kwCzR0hTQS01ZnA2LTR4dzMteHFxM84AAzyU

npm @keystone-6/core

Filter by Severity

Low 2 Critical 2 Moderate 1