{"action":"Upgrade graphiti to 1.10.2 or later.","affected":[{"fixed":"1.10.2","introduced":"0"}],"component":"graphiti","cve_ids":["CVE-2026-33286"],"ecosystem":"RubyGems","epss":0.00657,"exploited":false,"fixed_versions":["1.10.2"],"ghsa_id":"GHSA-3m5v-4xp5-gjg2","id":"tcs_01M5KEGB5EA5TZ9Y9TJZMMJCZG","modified_at":"2026-03-25T21:48:48.262229Z","published_at":"2026-03-20T15:58:14Z","references":["https://osv.dev/vulnerability/GHSA-3m5v-4xp5-gjg2","https://github.com/graphiti-api/graphiti/security/advisories/GHSA-3m5v-4xp5-gjg2","https://nvd.nist.gov/vuln/detail/CVE-2026-33286","https://github.com/graphiti-api/graphiti/commit/ddb5ad2b69330774bd1a47935ed89a9fe4396a54","https://github.com/graphiti-api/graphiti","https://github.com/graphiti-api/graphiti/releases/tag/v1.10.2","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/graphiti/CVE-2026-33286.yml"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-3m5v-4xp5-gjg2","url":"https://osv.dev/vulnerability/GHSA-3m5v-4xp5-gjg2"}],"summary":"Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names"}