PT-2026-46188

CVE-2026-10802

Published

2026-06-04

Updated

2026-06-04

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions keystonejs keystone versions prior to 20260319

Description A remote resource consumption issue exists within the GraphQL API Endpoint component, specifically affecting the library packages/core/src/lib/core/queries/output-field.ts. This allows a remote attacker to manipulate the system, leading to excessive resource usage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Nedlir

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

CWE-404: Improper Resource Shutdown or Release

Related identifiers