graphql-hive
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| graphql-modules | 1 | – | Jan 16, 2026 |
| graphql-scalars | 1 | – | Oct 23, 2026 |
Exploited and recent CVEs
- CVE-2026-115887 graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service 0.5%
- CVE-2026-23735 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in graphql-modules 0.6%