CVE-2026-63421
1 advisory.
npm/@keystone-6/core CVE-2026-63421: high 7.5
Keystone vulnerable to `graphql.maxTake` bypass with negative `take`
Action: Upgrade @keystone-6/core to 6.5.3 or later.
npm i @keystone-6/core@6.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.5.3 | - |
Fixed versions
| 6.5.3 |
Sources
- osv: GHSA-cqmq-8755-7xvh
- https://github.com/keystonejs/keystone/security/advisories/GHSA-cqmq-8755-7xvh
- https://github.com/keystonejs/keystone/pull/9859
- https://github.com/keystonejs/keystone/commit/9fb88b246950ce4de754a43fe6416f20403577b1
- https://github.com/keystonejs/keystone
- https://github.com/keystonejs/keystone/releases/tag/@keystone-6/core@6.5.3
CVE-2026-63421 · published · modified · JSON