Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Linked advisories
Affected vendors and products
More on GraphQL
Other advisories
- MediumCVE-2026-118666Ardatan Graphql-tools: Offenlegung vertraulicher Informationen
- HighCVE-2026-118665Ardatan Graphql-tools: unzureichender Sitzungsablauf
- HighCVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
- HighCVE-2026-115887graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
- HighCVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
- HighCVE-2026-118665GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
- MediumCVE-2026-118666GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
- MediumCVE-2026-118666GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
Source: https://thehackernews.com/2026/08/critical-gitlab-graphql-flaw-could-let.html
ID