ROOT-APP-NPM-CVE-2026-114604 CVE-2026-114604 in @graphql-tools/utils - Patched by Root

Root has patched CVE-2026-114604 in the @graphql-tools/utils package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-104852 CVE-2026-104852 in @graphql-tools/utils - Patched by Root

Root has patched CVE-2026-104852 in the @graphql-tools/utils package for Root:npm. Multiple fixed versions available...

CLSA-2026-1793113298 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 10.11.0-tuxcare.1...

CLSA-2026-1793113090 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 12.0.0-tuxcare.1...

CLSA-2026-1793098698 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 11.2.2-tuxcare.2...

CLSA-2026-1793047238 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 10.9.1-tuxcare.1...

CLSA-2026-1793047143 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.13.1-tuxcare.1...

CLSA-2026-1793047049 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 9.2.1-tuxcare.1...

CLSA-2026-1793023448 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.12.0-tuxcare.1...

CLSA-2026-1793022219 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.8.0-tuxcare.1...

CLSA-2026-1793021479 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.6.5-tuxcare.1...

CLSA-2026-1793020728 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.9.1-tuxcare.1...

CLSA-2026-1793019970 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 7.10.0-tuxcare.2...

CLSA-2026-1793018204 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 8.9.0-tuxcare.1...

CLSA-2026-1792937883 TuxCare security update for @graphql-tools/utils (1 CVE)

TuxCare rebuilt @graphql-tools/utils to address 1 CVE. Fixed in 6.0.9-tuxcare.1...

@adamwdennis/nestjs-typeorm-cursor-pagination (1.0.0), @ambak/nest-logger (>=1.0.11, <=1.2.1) +239 more potentially affected by CVE-2026-114604 via @graphql-tools/utils (>=12.0.0, <=12.0.2-alpha-20260930213106-001ad6da4923b8bb612d81d5418e51f7365e603b)

@graphql-tools/utils NPM version =12.0.0, =1.0.11, =0.1.5, =0.0.1, =1.0.0, =0.0.1, =1.2.5, =3.1.2, =1.0.8, =1.0.0, =1.0.7, =0.0.1, =1.0.0 - @bune/common 0.0.1 - @cedarjs/api-server-watch 8.0.0-canary.3342 - @cedarjs/cli 8.0.0-canary.3342 and more Source cves: CVE-2026-114604 Source advisory:...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +2119 more potentially affected by CVE-2026-114604 via @graphql-tools/utils (>=10.10.1, <=12.0.2-alpha-20260930213106-001ad6da4923b8bb612d81d5418e51f7365e603b)

@graphql-tools/utils NPM version =10.10.1, =0.1.0, =0.0.1, =1.0.21, =0.9.0, =2.1.2, =0.3.6, =0.4.0, =1.0.0-alpha.0, =1.0.0, =1.1.14, =0.1.1, =0.1.0, =2.10.0, =2.7.0, =2.7.0, =2.12.2 and more Source cves: CVE-2026-114604 Source advisory: SNYK:JS-GRAPHQLTOOLSUTILS-21460660...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +2119 more potentially affected by CVE-2026-114604 via @graphql-tools/utils (>=10.10.1, <=12.0.1)

@graphql-tools/utils NPM version =10.10.1, =0.1.0, =0.0.1, =1.0.21, =0.9.0, =2.1.2, =0.3.6, =0.4.0, =1.0.0-alpha.0, =1.0.0, =1.1.14, =0.1.1, =0.1.0, =2.10.0, =2.7.0, =2.7.0, =2.12.2 and more Source cves: CVE-2026-114604 Source advisory: GHSA-C4QX-W738-7HR3...

@0day-network/mod-renderer (>=0.1.0, <=0.1.1), @0day-network/react-sdk (>=0.0.1, <=0.2.1) +2119 more potentially affected by CVE-2026-114604 via @graphql-tools/utils (>=10.10.1, <=12.0.2-alpha-20260930213106-001ad6da4923b8bb612d81d5418e51f7365e603b)

@graphql-tools/utils NPM version =10.10.1, =0.1.0, =0.0.1, =1.0.21, =0.9.0, =2.1.2, =0.3.6, =0.4.0, =1.0.0-alpha.0, =1.0.0, =1.1.14, =0.1.1, =0.1.0, =2.10.0, =2.7.0, =2.7.0, =2.12.2 and more Source cves: CVE-2026-114604 Source advisory: OSV:GHSA-C4QX-W738-7HR3...

GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segments

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils npm, pkg:github/ardatan/graphql-tools | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath packages/utils/src/mergeIncrementalResult.ts | | Vulnerability...