GR
Product
graphql-tools
4
CVEs
0
On KEV
8.2
Max CVSS
4
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add graphql-tools to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118665 New | 8.2 | Oct 28 | GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications Affected: < 9.0.36 |
| CVE-2026-104852 | 8.2 | Oct 5 | GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` Affected: < 12.0.1 |
| CVE-2026-103921 | 7.4 | Oct 1 | GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor Affected: < 1.1.35 |
| CVE-2026-118666 New | 6.0 | Oct 28 | GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller Affected: < 9.0.36 |
Showing 4