CVE-2026-10802

MEDIUM

keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption

Title source: cna
STIX 2.1

Description

A vulnerability was detected in keystonejs keystone up to 20260319. This vulnerability affects unknown code in the library packages/core/src/lib/core/queries/output-field.ts of the component GraphQL API Endpoint. The manipulation results in resource consumption. It is possible to launch the attack remotely. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

References (8)

Core 8
Core References
Vdb Entry vdb-entry
VDB-368251 | keystonejs keystone GraphQL API Endpoint output-field.ts resource consumption
https://vuldb.com/vuln/368251
Signature, Permissions Required signature permissions-required
VDB-368251 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/368251/cti
Third Party Advisory third-party-advisory
CVE-2026-10802 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10802
Third Party Advisory third-party-advisory
Submit #831461 | Keystone KeystoneJS 2026-03-19 Denial of Service
https://vuldb.com/submit/831461

Scores

CVSS v3 4.3
EPSS 0.0052
EPSS Percentile 39.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-400 CWE-404
Status published
Products (1)
keystonejs/keystone 20260319
Published Jun 04, 2026
Tracked Since Jun 04, 2026