absinthe-graphql

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

absinthe-graphql records in CISA KEV

No absinthe-graphql vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Absinthe 2 records MEDIUM Absinthe.plug 1 record MEDIUM

Records

1 record in Absinthe.plug · all components

TI-2026-31014 CVE-2026-42794 · GHSA-c62g-j346-39v5

Reflected XSS via backslash bypass in GraphiQL js_escape in absinthe_plug

MEDIUM 45

Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00282 Published 2026-05-08 Fixed in 1.5.10 CWE-79

Open these records in search →

Critical	0
High	2
Medium	0
Low	1
No CVSS	0