Vendor
Ardatan
6 known vulnerabilities in products by Ardatan, 0 of them actively exploited (CISA KEV).
Key figures
6
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-104852 | GraphQL Tools has prototype pollution in well-established utility function `mergeDeep` | — | |
| High | CVE-2026-118665 | GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications | — | |
| High | CVE-2026-103921 | GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor | 7.4 | |
| Medium | CVE-2026-118666 | GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller | — | |
| High | CVE-2025-27097 | Ardatan Graphql-mesh: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2025-27098 | Ardatan Graphql-mesh: Path Traversal | 5.8 |
Products
| Graphql-tools | 4 | 0 |