Log in Start free

@graphql-tools

Products

ProductCVEsExploitedLatest
executor-legacy-ws3–Oct 28, 2026

Exploited and recent CVEs

  • CVE-2026-118666 Medium 6.0 GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller 0.3%
  • CVE-2026-118665 High 8.2 GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications 0.4%
  • CVE-2026-103921 High 7.4 GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor 0.3%