EUVD-2023-2806

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

GraphQL Mesh is a framework enabling GraphQL and other services, with caching and memory considerations.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-27097	20 Feb 202521:17	–	circl
CNNVD	graphql-mesh 资源管理错误漏洞	20 Feb 202500:00	–	cnnvd
CVE	CVE-2025-27097	20 Feb 202520:15	–	cve
Cvelist	CVE-2025-27097 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	20 Feb 202520:15	–	cvelist
Github Security Blog	Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	10 Oct 202321:29	–	github
NVD	CVE-2025-27097	20 Feb 202521:15	–	nvd
OSV	CVE-2025-27097 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	20 Feb 202520:15	–	osv
OSV	GHSA-RR4X-CRHF-8886 Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation	10 Oct 202321:29	–	osv
Positive Technologies	PT-2023-36348 · Unknown · Graphql Mesh	10 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2025-27097	22 Feb 202520:22	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "f8e140ab-edf4-38d5-8269-ddde9897f021",
        "vendor": {
          "name": "ardatan"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ba02fe29-0109-3a1c-85b7-78d088005a24",
        "product": {
          "name": "graphql-mesh"
        },
        "product_version": "@graphql-mesh/runtime:  0.96.9, < 0.96.9"
      }
    ]
  }
]

Source	Link
github	www.github.com/Urigo/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886
github	www.github.com/Urigo/graphql-mesh/commit/482d813a9f75935024aa77872125d197f5fca3d0
github	www.github.com/Urigo/graphql-mesh
github	www.github.com/Urigo/graphql-mesh/releases/tag/release-1696859949678
github	www.github.com/ardatan/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27097

03 Oct 2025 20:07Current

6.4Medium risk

Vulners AI Score6.4

CVSS 45.1

CVSS 3.17.5

EPSS0.00414

SSVC