Vulnerabilities

TI-2026-85665 CVE-2026-114604

Prototype pollution in GraphQL Tools mergeIncrementalResult helper

LOW 37

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00521 Published 2026-11-05 Fixed in 12.0.2 CWE-1321

TI-2026-82207 CVE-2026-118666 · GHSA-mp66-8ww2-pcwm

HIGH 66

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00335 Published 2026-10-28 Fixed in 9.0.36, 1.1.36 CWE-200

TI-2026-82206 CVE-2026-118665 · GHSA-434m-5hcj-pxf3

HIGH 69

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00388 Published 2026-10-28 Fixed in 9.0.36, 1.1.36 CWE-613

TI-2026-68299 CVE-2026-104852 · GHSA-7mx3-vvmw-hjmv

LOW 36

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00452 Published 2026-10-05 Partial fix · 12.0.1 CWE-1321

TI-2026-65765 CVE-2026-103921 · GHSA-6fw5-9hq8-w87g

LOW 34

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00274 Published 2026-10-01 Fixed in 1.1.35 CWE-295