Vulnerabilities

TI-2026-45200 CVE-2026-63421 · GHSA-cqmq-8755-7xvh

Keystone: `graphql.maxTake` bypass with negative `take`

MEDIUM 40

Keystone is a content management system for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0067 Published 2026-08-21 Fixed in 6.5.3 CWE-20

TI-2026-09270 CVE-2026-10802 · GHSA-45jq-c8xm-jfw9

keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption

MEDIUM 57

A vulnerability was detected in keystonejs keystone up to 20260319.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0031 Published 2026-06-04 No fix listed CWE-400

TI-2026-25736 CVE-2026-33326 · GHSA-cgcg-q9jh-5pr2

@keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany

LOW 20

Keystone is a content management system for Node.js.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00268 Published 2026-03-24 Fixed in 6.5.2 CWE-863

TI-2025-29391 CVE-2025-46720 · GHSA-hg9m-67mm-7pg3

Keystone has an unintended `isFilterable` bypass that can be used as an oracle to match hidden fields

LOW 20

Keystone is a content management system for Node.js.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00287 Published 2025-05-05 Fixed in 6.5.0 CWE-200

TI-2023-20917 CVE-2023-40027 · GHSA-9cvc-v7wm-992c

Conditionally missing authorization in @keystone-6/core

LOW 25

Keystone is an open source headless CMS for Node.js — built with GraphQL and React.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00579 Published 2023-08-15 Fixed in 5.5.1 CWE-862

TI-2023-17083 CVE-2023-34247 · GHSA-jqxr-vjvv-899m

@keystone-6/auth Open Redirect vulnerability

LOW 27

Keystone is a content management system for Node.JS.

CVSS 3.1MEDIUM 6.1 Adjacent network Low privileges User interaction EPSS 0.00407 Published 2023-06-13 Fixed in 7.0.0 CWE-601

TI-2022-18756 CVE-2022-39382 · GHSA-25mx-2mxm-6343

NODE_ENV in Keystone defaults to development with esbuild

HIGH 82

Keystone is a headless CMS for Node.js — built with GraphQL and React.`@keystone-6/[email protected] || 3.0.1` users that use `NODE_ENV` to trigger security-sensitive functionality in their production builds are vulnerable to `…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0206 Published 2022-11-03 Fixed in 3.0.2 CWE-74

TI-2022-18698 CVE-2022-39322 · GHSA-6mhr-52mv-6v6f

@keystone-6/core vulnerable to field-level access-control bypass for multiselect field

HIGH 82

@keystone-6/core is a core package for Keystone 6, a content management system for Node.js.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01458 Published 2022-10-25 Fixed in 2.3.1 CWE-285

TI-2022-11852 CVE-2022-29354 · GHSA-6p5h-jwvv-w7mr

An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1…

MEDIUM 47

An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02597 Published 2022-05-16 No fix listed CWE-434

TI-2022-00038 CVE-2022-0087 · GHSA-hrgx-7j6v-xj82

Cross-site Scripting (XSS) - Reflected in keystonejs/keystone

LOW 32

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0275 Published 2022-01-11 Fixed in @keystone-6/[email protected], 1.0.2 CWE-79

TI-2021-12293 CVE-2021-32624 · GHSA-27g8-r9vw-765x

Private Field data leak

LOW 34

Keystone 5 is an open source CMS platform to build Node.js applications.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00864 Published 2021-05-24 No fix listed CWE-200

TI-2015-07619 CVE-2015-9240 · GHSA-39pj-gq8q-9pfj

Credentials management flaw in HackerOne keystone node module

LOW 34

Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addresses could be matched.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2018-05-29 Fixed in 0.3.16 CWE-255

TI-2017-12181 CVE-2017-16570 · GHSA-q43c-g2g7-6gxj

KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF…

MEDIUM 42

KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02213 Published 2017-11-06 Fixed in 4.0.0-beta.7 CWE-352

TI-2017-11628 CVE-2017-15881 · GHSA-7cv6-gvx3-m54m

Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote…

LOW 24

Cross-Site Scripting vulnerability in KeystoneJS before 4.0.0-beta.7 allows remote authenticated administrators to inject arbitrary web script or HTML via the "content brief" or "content extended" field, a different vuln…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.01215 Published 2017-10-24 Fixed in 4.0.0-beta7 CWE-79

TI-2017-11626 CVE-2017-15879 · GHSA-6494-v9fq-fgq2

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in…

MEDIUM 48

CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07217 Published 2017-10-24 Fixed in 4.0.0-beta7 CWE-20

TI-2017-11625 CVE-2017-15878 · GHSA-7qcx-jmrc-h2rr

A cross-site scripting (XSS) vulnerability exists in…

LOW 33

A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03415 Published 2017-10-24 Fixed in 4.0.0 CWE-79

Vulnerabilities

Filters