Skip to content
Threat Feed
Subscribe

Vendor

Keystone

1 brief RSS
low advisory

Keystone GraphQL maxTake Argument Injection

The Keystone @keystone-6/core package is vulnerable to a GraphQL input validation flaw, CVE-2026-63421, where negative values in the 'take' argument bypass configured result limits.

Keystone Core
1c