CVE-2026-44224 Wiki.js: Privilege Escalation via Missing Group Validation in users.update

Wiki.js is an open source wiki app built on Node.js. Prior to 2.5.313, the users.update GraphQL mutation accepts an arbitrary groups array and applies it directly to the database with no validation of the group IDs supplied. The resolver passes the caller's arguments straight to the model without...

CVE-2025-46720

Keystone is a content management system for Node.js. Prior to version 6.5.0, "field.isFilterable" access control can be bypassed in "update" and "delete" mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable...

CVE-2025-46720: Observable Discrepancy

Keystone is a content management system for Node.js. Prior to version 6.5.0, field.isFilterable access control can be bypassed in update and delete mutations by adding additional unique filters. These filters can be used as an oracle to probe the existence or value of otherwise unreadable fields...