CVE-2026-10802

MEDIUM 4.3

keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumption. It is possible to launch the attack remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

CWE	CWE-400 CWE-404
Vendor	keystonejs
Product	keystone
Published	Jun 4, 2026
Last Updated	Jun 4, 2026

Stay Ahead of the Next One

Get instant alerts for keystonejs keystone

Be the first to know when new medium vulnerabilities affecting keystonejs keystone are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

keystonejs / keystone

20260319

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/368251 vuldb.com: https://vuldb.com/vuln/368251/cti vuldb.com: https://vuldb.com/cve/CVE-2026-10802 vuldb.com: https://vuldb.com/submit/831461 github.com: https://github.com/keystonejs/keystone/issues/9789 github.com: https://github.com/keystonejs/keystone/pull/9831 gist.github.com: https://gist.github.com/nedlir/0431275665076772844ebfe5167e54f6 github.com: https://github.com/keystonejs/keystone/

Credits

🔍 nedlir (VulDB User) VulDB CNA Team