keystone
Web Application Framework and Admin GUI / Content Management System built on Express.js and Mongoose
Security Advisories for keystone in npm
Potential
Low
over 1 year ago
Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields
npm
@keystone-6/core
Potential
Moderate
almost 3 years ago
When `ui.isAccessAllowed` is `undefined`, the `adminMeta` GraphQL query is publicly accessible
npm
@keystone-6/core
Potential
Potential
Low
about 3 years ago
@keystone-6/core's bundled cuid package known to be insecure
npm
@keystone-6/core
Potential
Critical
almost 4 years ago
@keystone-6/core's NODE_ENV defaults to development with esbuild
npm
@keystone-6/core
Potential
Critical
almost 4 years ago
Field-level access-control bypass for multiselect field
npm
@keystone-6/core
Potential
High
over 4 years ago
Reflected cross-site scripting (XSS) vulnerability
npm
@keystone-next/auth, @keystone-6/auth