AR
Vendor
ardatan
6
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118666 New | GR graphql-tools ardatan | 6.0 | Oct 28 | GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller |
| CVE-2026-118665 New | GR graphql-tools ardatan | 8.2 | Oct 28 | GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications |
| CVE-2026-104852 | GR graphql-tools ardatan | 8.2 | Oct 5 | GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` |
| CVE-2026-103921 | GR graphql-tools ardatan | 7.4 | Oct 1 | GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor |
| CVE-2025-27097 | GR graphql-mesh ardatan | 7.5 | Feb 20 | Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation |
| CVE-2025-27098 | GR graphql-mesh ardatan | 7.5 | Feb 20 | Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler in graphql-mesh |