Homepage

@keystonejs/keystone/.../keystone@5.3.0 vulnerabilities

The main @keystonejs class & CLI. This is where the magic happens.

  • latest version

    19.3.4

  • first published

    5 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View keystone package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the @keystonejs/keystone package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Information Exposure

    @keystonejs/keystone is a The main @keystonejs class & CLI. This is where the magic happens.

    Affected versions of this package are vulnerable to Information Exposure. This is due to access control bypass. The complexity of completing the attack is limited by some length-dependent behaviors and the fidelity of the exposed information. Under some circumstances, field values or field value meta data can be determined, despite the field or list having read access control configured. If you use private fields or lists, you may be impacted.

    How to fix Information Exposure?

    There is no fixed version for @keystonejs/keystone.

    *
    Go back to all versions of this package