01 Record

CVE-2026-63421

Keystone: `graphql.maxTake` bypass with negative `take`

HighPUBLISHEDCNA: GitHub_M

Base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

02 Description

Keystone: `graphql.maxTake` bypass with negative `take`

Published

2026-08-21 20:15Z5 HR AGO

Last updated

2026-08-21 20:15Z5 HR AGO

Reserved

2026-07-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

5b226ca22bf3e8301c9e46df6ad5ea32ec18a62d3d3f6df94bc381e92d99435c

VendorProductVersionsPlatforms

keystonejskeystone< 6.5.3—