graphql-mesh vulnerabilities

2 known vulnerabilities in graphql-mesh from Ardatan. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  graphql-mesh: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-27098Feb 20, 2025Ardatan

  GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in

• 7.5 High severity

  graphql-mesh: Missing Release of Memory after Effective Lifetime

  CVE-2025-27097Feb 20, 2025Ardatan

  GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the r