높음취약점 권고JavaScript / Node.js GitHub2026. 10. 23. 오전 01:28

GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments

影響: npm:@graphql-tools/utils >= 10.10.1, <= 12.0.1 → 12.0.2

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils (npm, pkg:github/ardatan/graphql-tools) | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath (packages/utils/src/mergeIncrementalResult.ts) | | Vulnerability class | Prototype pollution (via unvalidated object path traversal) | | Verified against | Source read at 134d67ae36a559651f43ec7fe4a9da76f4a00c2b; master HEAD ccca0ff0dc8ea20726fd116b2f19a38709c30…

GitHub Advisory Database에서 읽기

CVE	CVE-2026-114604
정보원	GitHub Advisory Database
수집 시각	2026. 10. 23. 오전 05:09
데이터	Markdown　JSON

2026. 10. 23. 오전 01:28, GitHub Advisory Database에서 "GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: JavaScript / Node.js, GitHub. CVE: CVE-2026-114604.