Known Vulnerabilities for Ash Graphql by Ash-project
Listed below are 10 of the newest known vulnerabilities associated with "Ash Graphql" by "Ash-project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-125748 json | Parabol before 15.21.2 contains a missing authorization vulnerability in the addReactjiToReactable GraphQL mutation that allo... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-124427 json | Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to re... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-124426 json | Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows unauthenticated attackers to re... | Not Provided | 2026-11-08 | 2026-11-08 |
| CVE-2026-123491 json | Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection vulnerability in GraphQL eager-loading: argum... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-121728 json | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attacke... | Not Provided | 2026-11-03 | 2026-11-09 |
| CVE-2026-119800 json | Ryot is a self-hosted personal tracking application. Prior to 10.5.6, the collectionContents GraphQL query implemented by col... | Not Provided | 2026-11-06 | 2026-11-06 |
| CVE-2026-119764 json | Mythic 3.2.16 through 3.4.0.61 contains a stored cross-site scripting vulnerability that allows attackers controlling target ... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-119599 json | AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign system-level s... | Not Provided | 2026-10-30 | 2026-10-30 |
| CVE-2026-119576 json | ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only readRecord to... | Not Provided | 2026-10-30 | 2026-11-05 |
| CVE-2026-119286 json | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a modul... | Not Provided | 2026-10-29 | 2026-10-30 |