CVE ID :CVE-2026-104852 Published : Oct. 5, 2026, 11:17 p.m. | 2 hours, 11 minutes ago Description :GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-104852 - GraphQL Tools has prototype pollution in well-established utility function `mergeDeep`

VERWANDTEARTIKEL

CVE-2026-105786 - Joplin: Unauthenticated account takeover via an attacker-chosen application-authorisation identifier

CVE-2026-105762 - Dify: Unauthenticated Server-Side Request Forgery in /console/api/remote-files/upload endpoint

CVE-2026-105763 - Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

CVE-2026-105783 - Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

CVE-2026-42589

CVE-2026-21589 - Atlassian Data Center and Server Arbitrary File Access Vulnerability