GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`
High
CVE-2026-104852
was published
for
@graphql-tools/utils
(npm)
Oct 5, 2026
@envelop/graphql-modules has a Race Condition vulnerability
High
GHSA-h3hw-29fv-2x75
was published
for
@envelop/graphql-modules
(npm)
Jan 21, 2026
GraphQL Modules has a Race Condition issue
High
CVE-2026-23735
was published
for
graphql-modules
(npm)
Jan 16, 2026
Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation
Moderate
CVE-2025-27097
was published
for
@graphql-mesh/runtime
(npm)
Oct 10, 2023
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Moderate
CVE-2025-27098
was published
for
@graphql-mesh/cli
(npm)
Feb 16, 2023
ProTip!
Advisories are also available from the
GraphQL API