CVE-2026-1170: falha de média gravidade em birkir prime
birkir prime GraphQL API graphql information disclosure
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.4%
A vulnerability was detected in birkir prime up to 0.4.0.beta.0. This issue affects some unknown processing of the file /graphql of the component GraphQL API. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
birkir · primeCVEs relacionadas — birkir prime
No mesmo produto, das mais perigosas para as menos.
CVE-2026-1173MEDIUMbirkir prime GraphQL Array Based Query Batch graphql denial of serviceEPSS 0.8%CVE-2026-1174MEDIUMbirkir prime GraphQL Alias graphql resource consumptionEPSS 0.8%CVE-2026-1172MEDIUMbirkir prime GraphQL Directive graphql denial of serviceEPSS 0.6%CVE-2026-1171MEDIUMbirkir prime GraphQL Field graphql denial of serviceEPSS 0.6%CVE-2026-1175MEDIUMbirkir prime GraphQL Directive graphql information exposureEPSS 0.5%CVE-2026-1169MEDIUMbirkir prime cross-site request forgeryEPSS 0.2%