Birkir vulnerabilities
We track 6 vulnerabilities in Birkir products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on January 19, 2026.
Latest Birkir vulnerabilities
- 7.5 High severity
prime: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be perfor
- 7.5 High severity
prime: Uncontrolled Resource Consumption
A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. T
- 9.8 Critical severity
prime: Improper Resource Shutdown or Release
A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed r
- 7.5 High severity
prime: Improper Resource Shutdown or Release
A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the file /graphql of the component GraphQL Directive Handler. The manipulation leads to denial of service. Remote exploitation of the attack is po
- 7.5 High severity
prime: Improper Resource Shutdown or Release
A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the component GraphQL Field Handler. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has
- 8.8 High severity
prime: Cross-Site Request Forgery
A security vulnerability has been detected in birkir prime up to 0.4.0.beta.0. This vulnerability affects unknown code. Such manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed publicly and may