Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: The-guild Clear all filters
TI-2025-19967 CVE-2025-27097 · GHSA-rr4x-crhf-8886

Uncontrolled resource consumption in ardatan graphql-mesh

Priority LOW 24

GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and Pos…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00432 Published 2025-02-20 Fixed in 0.96.9 CWE-400
TI-2025-19968 CVE-2025-27098 · GHSA-j2wh-wrv3-4x4g

Path traversal in ardatan graphql-mesh

Priority HIGH 66

GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and Pos…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00364 Published 2025-02-20 Fixed in 0.82.22, 0.3.19 CWE-22
TI-2021-06027 CVE-2021-23326 · GHSA-vhhw-xjvf-wprr

Command injection in @graphql-tools/git-loader

Priority MEDIUM 43

This affects the package @graphql-tools/git-loader before 6.2.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02848 Published 2021-01-20 Fixed in 6.2.6 CWE-78