Homepage
About Snyk

@keystonejs/keystone@5.3.0 vulnerabilities

The main @keystonejs class & CLI. This is where the magic happens.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @keystonejs/keystone package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Information Exposure

@keystonejs/keystone is a The main @keystonejs class & CLI. This is where the magic happens.

Affected versions of this package are vulnerable to Information Exposure. This is due to access control bypass. The complexity of completing the attack is limited by some length-dependent behaviors and the fidelity of the exposed information. Under some circumstances, field values or field value meta data can be determined, despite the field or list having read access control configured. If you use private fields or lists, you may be impacted.

How to fix Information Exposure?

There is no fixed version for @keystonejs/keystone.

*
Go back to all versions of this package