{"id":"GHSA-cqmq-8755-7xvh","summary":"Keystone vulnerable to `graphql.maxTake` bypass with negative `take`","details":"# Summary\nThe value of `graphql.maxTake` can be bypassed by providing a negative input.\nThis can be used to exceed the developer's intended `graphql.maxTake` value, allowing queries to return results in excess of the `graphql.maxTake` value set.\n\n# Impact\nThis affects any project relying on `graphql.maxTake` to bound the number of items returned per query.\n\n# Patches\nThis issue has been patched in `@keystone-6/core` version `6.5.3`.\n\nIf you cannot patch, you can workaround this by restricting `take` input values in your GraphQL queries to the bounded value, or by blocking negative values.\n\n# Credit\nThis issue was found by [Haxset's](https://haxset.com) Security Scanner and validated by their team.","aliases":["CVE-2026-63421"],"modified":"2026-08-21T21:10:59.624585Z","published":"2026-08-21T20:55:11Z","database_specific":{"cwe_ids":["CWE-20","CWE-480"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2026-08-21T20:55:11Z","nvd_published_at":null},"references":[{"type":"WEB","url":"https://github.com/keystonejs/keystone/security/advisories/GHSA-cqmq-8755-7xvh"},{"type":"WEB","url":"https://github.com/keystonejs/keystone/pull/9859"},{"type":"WEB","url":"https://github.com/keystonejs/keystone/commit/9fb88b246950ce4de754a43fe6416f20403577b1"},{"type":"PACKAGE","url":"https://github.com/keystonejs/keystone"},{"type":"WEB","url":"https://github.com/keystonejs/keystone/releases/tag/@keystone-6/core@6.5.3"}],"affected":[{"package":{"name":"@keystone-6/core","ecosystem":"npm","purl":"pkg:npm/%40keystone-6/core"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.5.3"}]}],"database_specific":{"last_known_affected_version_range":"\u003c= 6.5.2","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-cqmq-8755-7xvh/GHSA-cqmq-8755-7xvh.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}