CVE-2026-1174: medium-severity vulnerability in birkir prime
birkir prime GraphQL Alias graphql resource consumption
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.8%
A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
birkir · primeRelated CVEs — birkir prime
In the same product, most dangerous first.
CVE-2026-1173MEDIUMbirkir prime GraphQL Array Based Query Batch graphql denial of serviceEPSS 0.8%CVE-2026-1172MEDIUMbirkir prime GraphQL Directive graphql denial of serviceEPSS 0.6%CVE-2026-1171MEDIUMbirkir prime GraphQL Field graphql denial of serviceEPSS 0.6%CVE-2026-1175MEDIUMbirkir prime GraphQL Directive graphql information exposureEPSS 0.5%CVE-2026-1170MEDIUMbirkir prime GraphQL API graphql information disclosureEPSS 0.4%CVE-2026-1169MEDIUMbirkir prime cross-site request forgeryEPSS 0.2%