Read the docs

The-guild

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

The-guild records in CISA KEV

No The-guild vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Graphql-tools 1 record MEDIUM Graphql Mesh 1 record LOW Graphql Mesh Cli 1 record HIGH Graphql Mesh Http 1 record HIGH

Records

3 records

TI-2025-19968 CVE-2025-27098 · GHSA-j2wh-wrv3-4x4g

Path traversal in ardatan graphql-mesh

Priority HIGH 66

GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and Pos…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00364 Published 2025-02-20 Fixed in 0.82.22, 0.3.19 CWE-22
TI-2021-06027 CVE-2021-23326 · GHSA-vhhw-xjvf-wprr

Command injection in @graphql-tools/git-loader

Priority MEDIUM 43

This affects the package @graphql-tools/git-loader before 6.2.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02848 Published 2021-01-20 Fixed in 6.2.6 CWE-78
TI-2025-19967 CVE-2025-27097 · GHSA-rr4x-crhf-8886

Uncontrolled resource consumption in ardatan graphql-mesh

Priority LOW 24

GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and Pos…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00432 Published 2025-02-20 Fixed in 0.96.9 CWE-400
Open these records in search →