How many CVEs does absinthe-graphql have?

absinthe-graphql has 3 published CVE records since 2026, including 3 in the last two years.

How many absinthe-graphql CVEs are in CISA KEV?

None of absinthe-graphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which absinthe-graphql products have the most CVEs?

The absinthe-graphql products with the most published CVEs are absinthe, absinthe_plug, absinthe.plug.

What are the most common weakness types in absinthe-graphql CVEs?

absinthe-graphql's CVEs most often map to these CWE weakness types: CWE-407 (Inefficient Algorithmic Complexity), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

Are there public exploits for absinthe-graphql vulnerabilities?

Yes — 1 of absinthe-graphql's CVEs have a known public exploit.

What is the average severity of absinthe-graphql CVEs?

The average CVSS base score across absinthe-graphql's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

3 CVEs

absinthe-graphql Vulnerabilities

Name: absinthe-graphql vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for absinthe-graphql.

3

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

6.4

Avg CVSS

2026–2026

Overview

absinthe-graphql has 3 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting absinthe-graphql products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on absinthe-graphql's vulnerability posture, as a share of its 3 published CVEs.

Average CVSS: 6.4
Critical / high: 67%
Actively exploited (KEV): 0%
Public exploit available: 33%
Patch available: 100%

Severity and exploitation

How the CVSS severity of absinthe-graphql's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium0

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of absinthe-graphql's CVEs are currently listed in CISA's KEV catalog.

Public exploits

1

One of absinthe-graphql's CVEs has a known public exploit available.

Most affected products

The absinthe-graphql products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in absinthe-graphql CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish absinthe-graphql CVE records.

EEF3 CVEs

Latest absinthe-graphql CVEs

The most recently disclosed vulnerabilities affecting absinthe-graphql.

Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe
CWE-770
High · CVSS 8.2
EPSS 0.6%2026-05-08
Reflected XSS via backslash bypass in GraphiQL js_escape in absinthe_plug
CWE-79
Low · CVSS 2.3
EPSS 0.3%2026-05-08
Quadratic fragment-name uniqueness check causes denial of service in absinthe
CWE-407
High · CVSS 8.7
EPSS 0.6%2026-05-08

Track new absinthe-graphql CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor absinthe-graphql CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,031 CVEs linux22,545 CVEs Google16,147 CVEs Apple15,069 CVEs Oracle12,706 CVEs Debian10,225 CVEs IBM8,823 CVEs Red Hat8,067 CVEs

Browse all vendors

Frequently asked questions

Common questions about absinthe-graphql vulnerabilities.

How many CVEs does absinthe-graphql have?: absinthe-graphql has 3 published CVE records since 2026, including 3 in the last two years.
How many absinthe-graphql CVEs are in CISA KEV?: None of absinthe-graphql's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which absinthe-graphql products have the most CVEs?: The absinthe-graphql products with the most published CVEs are absinthe, absinthe_plug, absinthe.plug.
What are the most common weakness types in absinthe-graphql CVEs?: absinthe-graphql's CVEs most often map to these CWE weakness types: CWE-407 (Inefficient Algorithmic Complexity), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
Are there public exploits for absinthe-graphql vulnerabilities?: Yes — 1 of absinthe-graphql's CVEs have a known public exploit.
What is the average severity of absinthe-graphql CVEs?: The average CVSS base score across absinthe-graphql's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track absinthe-graphql vulnerabilities

Monitor new absinthe-graphql vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing