Ardatan vulnerabilities
We track 6 vulnerabilities in Ardatan products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on November 5, 2026.
Latest Ardatan vulnerabilities
- 8.4 High severity
graphql-tools: Improperly Controlled Modification of Object Prototype Attributes
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. From 10.10.1 until 12.0.2, the @graphql-tools/utils mergeIncrementalResult helper passes incrementalResult.path segments to setObjectKeyPath without runtime primitive-type v
- 8.2 High severity
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas.
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GraphQL Tools legacy WebSocket executor package, buildWSLegacyExecutor in packages/executors/legacy-ws/src/index.ts retains request.extensions
- 8.2 High severity
graphql-tools: Improperly Controlled Modification of Object Prototype Attributes
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does not exclude __proto__, c
- 7.4 High severity
graphql-tools: Improper Certificate Validation
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection off for Node.js connections to wss:// endpoints. Applications us
- 7.5 High severity
graphql-mesh: Improper Limitation of a Pathname to a Restricted Directory
GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in
- 7.5 High severity
graphql-mesh: Missing Release of Memory after Effective Lifetime
GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the r