CVE-2026-1174: falha de média gravidade em birkir prime
birkir prime GraphQL Alias graphql resource consumption
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.8%
A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
birkir · primeCVEs relacionadas — birkir prime
No mesmo produto, das mais perigosas para as menos.
CVE-2026-1173MEDIUMbirkir prime GraphQL Array Based Query Batch graphql denial of serviceEPSS 0.8%CVE-2026-1172MEDIUMbirkir prime GraphQL Directive graphql denial of serviceEPSS 0.6%CVE-2026-1171MEDIUMbirkir prime GraphQL Field graphql denial of serviceEPSS 0.6%CVE-2026-1175MEDIUMbirkir prime GraphQL Directive graphql information exposureEPSS 0.5%CVE-2026-1170MEDIUMbirkir prime GraphQL API graphql information disclosureEPSS 0.4%CVE-2026-1169MEDIUMbirkir prime cross-site request forgeryEPSS 0.2%