Vulnerabilities

TI-2025-14189 CVE-2025-15550 · GHSA-v4f8-5p2q-h868

birkir prime <= 0.4.0.beta.0 - Cross-Site Request Forgery in GraphQL

MEDIUM 62

birkir prime <= 0.4.0.beta.0 contains a cross-site request forgery vulnerability in its GraphQL endpoint that allows attackers to exploit GET-based query requests.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00156 Published 2026-01-29 No fix listed CWE-352

TI-2026-00902 CVE-2026-1175 · GHSA-hg57-8cqc-xf6h

birkir prime GraphQL Directive graphql information exposure

HIGH 70

A vulnerability was identified in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00495 Published 2026-01-19 No fix listed CWE-200

TI-2026-00901 CVE-2026-1174 · GHSA-79xr-h873-2v98

birkir prime GraphQL Alias graphql resource consumption

HIGH 70

A vulnerability was determined in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00796 Published 2026-01-19 No fix listed CWE-400

TI-2026-00900 CVE-2026-1173 · GHSA-7x8v-q8wp-hcg7

birkir prime GraphQL Array Based Query Batch graphql denial of service

HIGH 70

A vulnerability was found in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00806 Published 2026-01-19 No fix listed CWE-404

TI-2026-00899 CVE-2026-1172 · GHSA-74rr-mvxh-jvg7

birkir prime GraphQL Directive graphql denial of service

MEDIUM 64

A vulnerability has been found in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00587 Published 2026-01-19 No fix listed CWE-404

TI-2026-00898 CVE-2026-1171 · GHSA-qvgm-c3f9-m43m

birkir prime GraphQL Field graphql denial of service

HIGH 70

A flaw has been found in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00587 Published 2026-01-19 No fix listed CWE-404

TI-2026-00897 CVE-2026-1170 · GHSA-grwh-fmhg-rqcq

birkir prime GraphQL API graphql information disclosure

HIGH 70

A vulnerability was detected in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00436 Published 2026-01-19 No fix listed CWE-200

TI-2026-00896 CVE-2026-1169 · GHSA-25w3-vxr6-gm5r

birkir prime cross-site request forgery

MEDIUM 57

A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0024 Published 2026-01-19 No fix listed CWE-352

Vulnerabilities

Filters