{"id":"GHSA-cqmq-8755-7xvh","revision":"d7cecaa5fcd34cf08793998c6ef9c503","records":[{"revision":"d7cecaa5fcd34cf08793998c6ef9c503","observedAt":"2026-10-24T13:17:17.793+00:00","statement":{"source":"osv","id":"GHSA-cqmq-8755-7xvh","aliases":["CVE-2026-63421"],"title":"Keystone vulnerable to `graphql.maxTake` bypass with negative `take`","description":"# Summary\nThe value of `graphql.maxTake` can be bypassed by providing a negative input.\nThis can be used to exceed the developer's intended `graphql.maxTake` value, allowing queries to return results in excess of the `graphql.maxTake` value set.\n\n# Impact\nThis affects any project relying on `graphql.maxTake` to bound the number of items returned per query.\n\n# Patches\nThis issue has been patched in `@keystone-6/core` version `6.5.3`.\n\nIf you cannot patch, you can workaround this by restricting `take` input values in your GraphQL queries to the bounded value, or by blocking negative values.\n\n# Credit\nThis issue was found by [Haxset's](https://haxset.com) Security Scanner and validated by their team.","state":0,"publishedAt":"2026-08-21T20:55:11+00:00","modifiedAt":"2026-08-21T21:10:59.624585+00:00","affected":[{"ecosystem":"npm","name":"@keystone-6/core","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"6.5.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"HIGH"}],"references":["https://github.com/keystonejs/keystone/security/advisories/GHSA-cqmq-8755-7xvh","https://github.com/keystonejs/keystone/pull/9859","https://github.com/keystonejs/keystone/commit/9fb88b246950ce4de754a43fe6416f20403577b1","https://github.com/keystonejs/keystone","https://github.com/keystonejs/keystone/releases/tag/@keystone-6/core@6.5.3"],"sourceUrl":"https://github.com/advisories/GHSA-cqmq-8755-7xvh","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-cqmq-8755-7xvh","identifiers":["GHSA-cqmq-8755-7xvh","CVE-2026-63421"]},"retained":false,"historicalAffected":[]}],"coverage":[]}