https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 16:53:36 +0000 https://vulnerability.circl.lu/sighting/9c32c258-8232-43b3-990a-56a4ce97695d/export {"uuid": "9c32c258-8232-43b3-990a-56a4ce97695d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63421", "type": "seen", "source": "https://gist.github.com/alon710/fba1ad6c3ccaacdec698da20783bacca", "content": "# CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63421\n\n## Summary\nA high-severity vulnerability exists in KeystoneJS, a popular Node.js CMS and GraphQL framework, where the query resolution engine fails to validate signed negative integers within the pagination subsystem. Unauthenticated remote attackers can leverage this flaw to bypass the 'graphql.maxTake' safety boundary. By sending large negative values in the 'take' query parameter, the underlying Prisma ORM interprets the value as an instruction to fetch rows from the end of the collection, allowing malicious actors to bypass pagination limits, trigger database resource exhaustion, and execute application-level Denial of Service (DoS) attacks.\n\n## TL;DR\nKeystoneJS prior to version 6.5.3 allows remote unauthenticated users to bypass configured database query limits (graphql.maxTake) by supplying negative integers to the 'take' parameter. This bypass forces the database to retrieve massive, unrestricted datasets, leading to severe resource exhaustion and system Denial of Service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20, CWE-480\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 7.5 (High)\n- **EPSS Score**: 0.0009\n- **Impact Category**: Availability (High)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- KeystoneJS content management systems running @keystone-6/core versions prior to 6.5.3\n- Database applications backed by Prisma ORM integrated with vulnerable KeystoneJS query layers\n- **@keystone-6/core**: < 6.5.3 (Fixed in: `6.5.3`)\n\n## Mitigation\n\n- Upgrade `@keystone-6/core` to version `6.5.3` or higher to natively block negative limit bypasses.\n- Apply Web Application Firewall (WAF) regular expression rules to drop payloads referencing negative take parameters.\n- Deploy custom Express middleware to recursively sanitize and block negative values in incoming GraphQL variable inputs.\n- Set aggressive database query timeouts and resource allocation caps within Prisma and database systems.\n\n**Remediation Steps:**\n1. Identify all KeystoneJS deployment instances and extract installed package version ranges.\n2. Execute `npm install @keystone-6/core@6.5.3` or `yarn upgrade @keystone-6/core@6.5.3` to apply the vendor-provided patch.\n3. Configure network-level or middleware-level input filtering for systems that cannot undergo immediate patching.\n4. Audit existing GraphQL schema configurations to ensure adequate rate limiting and query depth analysis are implemented.\n\n## References\n\n- [GitHub Security Advisory GHSA-cqmq-8755-7xvh](https://github.com/keystonejs/keystone/security/advisories/GHSA-cqmq-8755-7xvh)\n- [CVE-2026-63421 Record](https://www.cve.org/CVERecord?id=CVE-2026-63421)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63421) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T07:32:13.219955Z"} {"uuid": "9c32c258-8232-43b3-990a-56a4ce97695d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63421", "type": "seen", "source": "https://gist.github.com/alon710/fba1ad6c3ccaacdec698da20783bacca", "content": "# CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-21\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63421\n\n## Summary\nA high-severity vulnerability exists in KeystoneJS, a popular Node.js CMS and GraphQL framework, where the query resolution engine fails to validate signed negative integers within the pagination subsystem. Unauthenticated remote attackers can leverage this flaw to bypass the 'graphql.maxTake' safety boundary. By sending large negative values in the 'take' query parameter, the underlying Prisma ORM interprets the value as an instruction to fetch rows from the end of the collection, allowing malicious actors to bypass pagination limits, trigger database resource exhaustion, and execute application-level Denial of Service (DoS) attacks.\n\n## TL;DR\nKeystoneJS prior to version 6.5.3 allows remote unauthenticated users to bypass configured database query limits (graphql.maxTake) by supplying negative integers to the 'take' parameter. This bypass forces the database to retrieve massive, unrestricted datasets, leading to severe resource exhaustion and system Denial of Service.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-20, CWE-480\n- **Attack Vector**: Network (AV:N)\n- **CVSS Severity**: 7.5 (High)\n- **EPSS Score**: 0.0009\n- **Impact Category**: Availability (High)\n- **Exploit Status**: poc\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- KeystoneJS content management systems running @keystone-6/core versions prior to 6.5.3\n- Database applications backed by Prisma ORM integrated with vulnerable KeystoneJS query layers\n- **@keystone-6/core**: < 6.5.3 (Fixed in: `6.5.3`)\n\n## Mitigation\n\n- Upgrade `@keystone-6/core` to version `6.5.3` or higher to natively block negative limit bypasses.\n- Apply Web Application Firewall (WAF) regular expression rules to drop payloads referencing negative take parameters.\n- Deploy custom Express middleware to recursively sanitize and block negative values in incoming GraphQL variable inputs.\n- Set aggressive database query timeouts and resource allocation caps within Prisma and database systems.\n\n**Remediation Steps:**\n1. Identify all KeystoneJS deployment instances and extract installed package version ranges.\n2. Execute `npm install @keystone-6/core@6.5.3` or `yarn upgrade @keystone-6/core@6.5.3` to apply the vendor-provided patch.\n3. Configure network-level or middleware-level input filtering for systems that cannot undergo immediate patching.\n4. Audit existing GraphQL schema configurations to ensure adequate rate limiting and query depth analysis are implemented.\n\n## References\n\n- [GitHub Security Advisory GHSA-cqmq-8755-7xvh](https://github.com/keystonejs/keystone/security/advisories/GHSA-cqmq-8755-7xvh)\n- [CVE-2026-63421 Record](https://www.cve.org/CVERecord?id=CVE-2026-63421)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63421) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-22T07:32:13.219955Z"} https://vulnerability.circl.lu/sighting/9c32c258-8232-43b3-990a-56a4ce97695d/export Sat, 22 Aug 2026 07:32:13 +0000 https://vulnerability.circl.lu/sighting/e169252a-05b4-4ad5-9a02-75fa66ffc366/export {"uuid": "e169252a-05b4-4ad5-9a02-75fa66ffc366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn36evjyu2b", "content": "\ud83d\udfe0 CVE-2026-63421 - High (7.5)\n\nKeystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in pac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63421/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T01:00:51.065226Z"} {"uuid": "e169252a-05b4-4ad5-9a02-75fa66ffc366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63421", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn36evjyu2b", "content": "\ud83d\udfe0 CVE-2026-63421 - High (7.5)\n\nKeystone is a content management system for Node.js. Prior to 6.5.3, the findMany resolver in pac...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63421/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T01:00:51.065226Z"} https://vulnerability.circl.lu/sighting/e169252a-05b4-4ad5-9a02-75fa66ffc366/export Sat, 22 Aug 2026 01:00:51 +0000