All 2 CVE vulnerabilities found in graphql-mesh, with AI-generated Chinese analysis, references, and POCs.
Vendor: ardatan
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-27097 | Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation CWE-400 | 8.1 | - | 2025-02-20 |
| CVE-2025-27098 | Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler in graphql-mesh CWE-22 | 5.8 | Medium | 2025-02-20 |
All 2 known CVE vulnerabilities affecting graphql-mesh with full Chinese analysis, references, and POCs where available.