CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-33326

Keystone is a content management system for Node.js. Prior to version 6.5.2, {field}.isFilterable access control can be bypassed in findMany queries by passing a cursor. This can be used to confirm the existence of records by protected field values. The fix for CVE-2025-46720 (field-level isFilterable bypass for update and delete mutations) added checks to the where parameter in update and delete mutations however the cursor parameter in findMany was not patched and accepts the same UniqueWhere input type. This issue has been patched in version 6.5.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 1.3%

CVSS Severity

CVSS v3 Score 4.3

References

https://github.com/keystonejs/keystone/security/advisories/GHSA-cgcg-q9jh-5pr2

Products affected by CVE-2026-33326

Keystonejs » Keystone » Version: 0.0.10

cpe:2.3:a:keystonejs:keystone:0.0.10
Keystonejs » Keystone » Version: 0.0.11

cpe:2.3:a:keystonejs:keystone:0.0.11
Keystonejs » Keystone » Version: 0.0.12

cpe:2.3:a:keystonejs:keystone:0.0.12
Keystonejs » Keystone » Version: 0.0.13

cpe:2.3:a:keystonejs:keystone:0.0.13
Keystonejs » Keystone » Version: 0.0.14

cpe:2.3:a:keystonejs:keystone:0.0.14
Keystonejs » Keystone » Version: 0.0.15

cpe:2.3:a:keystonejs:keystone:0.0.15
Keystonejs » Keystone » Version: 0.0.16

cpe:2.3:a:keystonejs:keystone:0.0.16
Keystonejs » Keystone » Version: 0.0.17

cpe:2.3:a:keystonejs:keystone:0.0.17
Keystonejs » Keystone » Version: 0.0.18

cpe:2.3:a:keystonejs:keystone:0.0.18
Keystonejs » Keystone » Version: 0.0.19

cpe:2.3:a:keystonejs:keystone:0.0.19
Keystonejs » Keystone » Version: 0.0.20

cpe:2.3:a:keystonejs:keystone:0.0.20
Keystonejs » Keystone » Version: 0.0.21

cpe:2.3:a:keystonejs:keystone:0.0.21
Keystonejs » Keystone » Version: 0.0.22

cpe:2.3:a:keystonejs:keystone:0.0.22
Keystonejs » Keystone » Version: 0.0.23

cpe:2.3:a:keystonejs:keystone:0.0.23
Keystonejs » Keystone » Version: 0.0.24

cpe:2.3:a:keystonejs:keystone:0.0.24
Keystonejs » Keystone » Version: 0.0.25

cpe:2.3:a:keystonejs:keystone:0.0.25
Keystonejs » Keystone » Version: 0.0.26

cpe:2.3:a:keystonejs:keystone:0.0.26
Keystonejs » Keystone » Version: 0.0.27

cpe:2.3:a:keystonejs:keystone:0.0.27
Keystonejs » Keystone » Version: 0.0.28

cpe:2.3:a:keystonejs:keystone:0.0.28
Keystonejs » Keystone » Version: 0.0.29

cpe:2.3:a:keystonejs:keystone:0.0.29
Keystonejs » Keystone » Version: 0.0.30

cpe:2.3:a:keystonejs:keystone:0.0.30
Keystonejs » Keystone » Version: 0.0.31

cpe:2.3:a:keystonejs:keystone:0.0.31
Keystonejs » Keystone » Version: 0.0.32

cpe:2.3:a:keystonejs:keystone:0.0.32
Keystonejs » Keystone » Version: 0.0.33

cpe:2.3:a:keystonejs:keystone:0.0.33
Keystonejs » Keystone » Version: 0.0.34

cpe:2.3:a:keystonejs:keystone:0.0.34
Keystonejs » Keystone » Version: 0.0.35

cpe:2.3:a:keystonejs:keystone:0.0.35
Keystonejs » Keystone » Version: 0.0.36

cpe:2.3:a:keystonejs:keystone:0.0.36
Keystonejs » Keystone » Version: 0.0.37

cpe:2.3:a:keystonejs:keystone:0.0.37
Keystonejs » Keystone » Version: 0.0.38

cpe:2.3:a:keystonejs:keystone:0.0.38
Keystonejs » Keystone » Version: 0.0.39

cpe:2.3:a:keystonejs:keystone:0.0.39
Keystonejs » Keystone » Version: 0.0.40

cpe:2.3:a:keystonejs:keystone:0.0.40
Keystonejs » Keystone » Version: 0.0.41

cpe:2.3:a:keystonejs:keystone:0.0.41
Keystonejs » Keystone » Version: 0.0.42

cpe:2.3:a:keystonejs:keystone:0.0.42
Keystonejs » Keystone » Version: 0.0.43

cpe:2.3:a:keystonejs:keystone:0.0.43
Keystonejs » Keystone » Version: 0.0.9

cpe:2.3:a:keystonejs:keystone:0.0.9
Keystonejs » Keystone » Version: 0.1.0

cpe:2.3:a:keystonejs:keystone:0.1.0
Keystonejs » Keystone » Version: 0.1.1

cpe:2.3:a:keystonejs:keystone:0.1.1
Keystonejs » Keystone » Version: 0.1.10

cpe:2.3:a:keystonejs:keystone:0.1.10
Keystonejs » Keystone » Version: 0.1.11

cpe:2.3:a:keystonejs:keystone:0.1.11
Keystonejs » Keystone » Version: 0.1.12

cpe:2.3:a:keystonejs:keystone:0.1.12
Keystonejs » Keystone » Version: 0.1.13

cpe:2.3:a:keystonejs:keystone:0.1.13
Keystonejs » Keystone » Version: 0.1.14

cpe:2.3:a:keystonejs:keystone:0.1.14
Keystonejs » Keystone » Version: 0.1.15

cpe:2.3:a:keystonejs:keystone:0.1.15
Keystonejs » Keystone » Version: 0.1.16

cpe:2.3:a:keystonejs:keystone:0.1.16
Keystonejs » Keystone » Version: 0.1.17

cpe:2.3:a:keystonejs:keystone:0.1.17
Keystonejs » Keystone » Version: 0.1.18

cpe:2.3:a:keystonejs:keystone:0.1.18
Keystonejs » Keystone » Version: 0.1.19

cpe:2.3:a:keystonejs:keystone:0.1.19
Keystonejs » Keystone » Version: 0.1.2

cpe:2.3:a:keystonejs:keystone:0.1.2
Keystonejs » Keystone » Version: 0.1.20

cpe:2.3:a:keystonejs:keystone:0.1.20
Keystonejs » Keystone » Version: 0.1.21

cpe:2.3:a:keystonejs:keystone:0.1.21
Keystonejs » Keystone » Version: 0.1.22

cpe:2.3:a:keystonejs:keystone:0.1.22
Keystonejs » Keystone » Version: 0.1.23

cpe:2.3:a:keystonejs:keystone:0.1.23
Keystonejs » Keystone » Version: 0.1.24

cpe:2.3:a:keystonejs:keystone:0.1.24
Keystonejs » Keystone » Version: 0.1.25

cpe:2.3:a:keystonejs:keystone:0.1.25
Keystonejs » Keystone » Version: 0.1.26

cpe:2.3:a:keystonejs:keystone:0.1.26
Keystonejs » Keystone » Version: 0.1.27

cpe:2.3:a:keystonejs:keystone:0.1.27
Keystonejs » Keystone » Version: 0.1.28

cpe:2.3:a:keystonejs:keystone:0.1.28
Keystonejs » Keystone » Version: 0.1.29

cpe:2.3:a:keystonejs:keystone:0.1.29
Keystonejs » Keystone » Version: 0.1.3

cpe:2.3:a:keystonejs:keystone:0.1.3
Keystonejs » Keystone » Version: 0.1.30

cpe:2.3:a:keystonejs:keystone:0.1.30
Keystonejs » Keystone » Version: 0.1.31

cpe:2.3:a:keystonejs:keystone:0.1.31
Keystonejs » Keystone » Version: 0.1.32

cpe:2.3:a:keystonejs:keystone:0.1.32
Keystonejs » Keystone » Version: 0.1.33

cpe:2.3:a:keystonejs:keystone:0.1.33
Keystonejs » Keystone » Version: 0.1.34

cpe:2.3:a:keystonejs:keystone:0.1.34
Keystonejs » Keystone » Version: 0.1.35

cpe:2.3:a:keystonejs:keystone:0.1.35
Keystonejs » Keystone » Version: 0.1.36

cpe:2.3:a:keystonejs:keystone:0.1.36
Keystonejs » Keystone » Version: 0.1.37

cpe:2.3:a:keystonejs:keystone:0.1.37
Keystonejs » Keystone » Version: 0.1.38

cpe:2.3:a:keystonejs:keystone:0.1.38
Keystonejs » Keystone » Version: 0.1.39

cpe:2.3:a:keystonejs:keystone:0.1.39
Keystonejs » Keystone » Version: 0.1.4

cpe:2.3:a:keystonejs:keystone:0.1.4
Keystonejs » Keystone » Version: 0.1.40

cpe:2.3:a:keystonejs:keystone:0.1.40
Keystonejs » Keystone » Version: 0.1.41

cpe:2.3:a:keystonejs:keystone:0.1.41
Keystonejs » Keystone » Version: 0.1.42

cpe:2.3:a:keystonejs:keystone:0.1.42
Keystonejs » Keystone » Version: 0.1.43

cpe:2.3:a:keystonejs:keystone:0.1.43
Keystonejs » Keystone » Version: 0.1.44

cpe:2.3:a:keystonejs:keystone:0.1.44
Keystonejs » Keystone » Version: 0.1.45

cpe:2.3:a:keystonejs:keystone:0.1.45
Keystonejs » Keystone » Version: 0.1.46

cpe:2.3:a:keystonejs:keystone:0.1.46
Keystonejs » Keystone » Version: 0.1.47

cpe:2.3:a:keystonejs:keystone:0.1.47
Keystonejs » Keystone » Version: 0.1.48

cpe:2.3:a:keystonejs:keystone:0.1.48
Keystonejs » Keystone » Version: 0.1.49

cpe:2.3:a:keystonejs:keystone:0.1.49
Keystonejs » Keystone » Version: 0.1.5

cpe:2.3:a:keystonejs:keystone:0.1.5
Keystonejs » Keystone » Version: 0.1.50

cpe:2.3:a:keystonejs:keystone:0.1.50
Keystonejs » Keystone » Version: 0.1.51

cpe:2.3:a:keystonejs:keystone:0.1.51
Keystonejs » Keystone » Version: 0.1.52

cpe:2.3:a:keystonejs:keystone:0.1.52
Keystonejs » Keystone » Version: 0.1.53

cpe:2.3:a:keystonejs:keystone:0.1.53
Keystonejs » Keystone » Version: 0.1.54

cpe:2.3:a:keystonejs:keystone:0.1.54
Keystonejs » Keystone » Version: 0.1.55

cpe:2.3:a:keystonejs:keystone:0.1.55
Keystonejs » Keystone » Version: 0.1.6

cpe:2.3:a:keystonejs:keystone:0.1.6
Keystonejs » Keystone » Version: 0.1.7

cpe:2.3:a:keystonejs:keystone:0.1.7
Keystonejs » Keystone » Version: 0.1.8

cpe:2.3:a:keystonejs:keystone:0.1.8
Keystonejs » Keystone » Version: 0.1.9

cpe:2.3:a:keystonejs:keystone:0.1.9
Keystonejs » Keystone » Version: 0.2.0

cpe:2.3:a:keystonejs:keystone:0.2.0
Keystonejs » Keystone » Version: 0.2.1

cpe:2.3:a:keystonejs:keystone:0.2.1
Keystonejs » Keystone » Version: 0.2.10

cpe:2.3:a:keystonejs:keystone:0.2.10
Keystonejs » Keystone » Version: 0.2.11

cpe:2.3:a:keystonejs:keystone:0.2.11
Keystonejs » Keystone » Version: 0.2.12

cpe:2.3:a:keystonejs:keystone:0.2.12
Keystonejs » Keystone » Version: 0.2.13

cpe:2.3:a:keystonejs:keystone:0.2.13
Keystonejs » Keystone » Version: 0.2.14

cpe:2.3:a:keystonejs:keystone:0.2.14
Keystonejs » Keystone » Version: 0.2.15

cpe:2.3:a:keystonejs:keystone:0.2.15
Keystonejs » Keystone » Version: 0.2.16

cpe:2.3:a:keystonejs:keystone:0.2.16
Keystonejs » Keystone » Version: 0.2.17

cpe:2.3:a:keystonejs:keystone:0.2.17
Keystonejs » Keystone » Version: 0.2.18

cpe:2.3:a:keystonejs:keystone:0.2.18
Keystonejs » Keystone » Version: 0.2.19

cpe:2.3:a:keystonejs:keystone:0.2.19
Keystonejs » Keystone » Version: 0.2.2

cpe:2.3:a:keystonejs:keystone:0.2.2
Keystonejs » Keystone » Version: 0.2.20

cpe:2.3:a:keystonejs:keystone:0.2.20
Keystonejs » Keystone » Version: 0.2.21

cpe:2.3:a:keystonejs:keystone:0.2.21
Keystonejs » Keystone » Version: 0.2.22

cpe:2.3:a:keystonejs:keystone:0.2.22
Keystonejs » Keystone » Version: 0.2.23

cpe:2.3:a:keystonejs:keystone:0.2.23
Keystonejs » Keystone » Version: 0.2.24

cpe:2.3:a:keystonejs:keystone:0.2.24
Keystonejs » Keystone » Version: 0.2.25

cpe:2.3:a:keystonejs:keystone:0.2.25
Keystonejs » Keystone » Version: 0.2.26

cpe:2.3:a:keystonejs:keystone:0.2.26
Keystonejs » Keystone » Version: 0.2.27

cpe:2.3:a:keystonejs:keystone:0.2.27
Keystonejs » Keystone » Version: 0.2.28

cpe:2.3:a:keystonejs:keystone:0.2.28
Keystonejs » Keystone » Version: 0.2.29

cpe:2.3:a:keystonejs:keystone:0.2.29
Keystonejs » Keystone » Version: 0.2.3

cpe:2.3:a:keystonejs:keystone:0.2.3
Keystonejs » Keystone » Version: 0.2.30

cpe:2.3:a:keystonejs:keystone:0.2.30
Keystonejs » Keystone » Version: 0.2.31

cpe:2.3:a:keystonejs:keystone:0.2.31
Keystonejs » Keystone » Version: 0.2.32

cpe:2.3:a:keystonejs:keystone:0.2.32
Keystonejs » Keystone » Version: 0.2.33

cpe:2.3:a:keystonejs:keystone:0.2.33
Keystonejs » Keystone » Version: 0.2.34

cpe:2.3:a:keystonejs:keystone:0.2.34
Keystonejs » Keystone » Version: 0.2.35

cpe:2.3:a:keystonejs:keystone:0.2.35
Keystonejs » Keystone » Version: 0.2.36

cpe:2.3:a:keystonejs:keystone:0.2.36
Keystonejs » Keystone » Version: 0.2.37

cpe:2.3:a:keystonejs:keystone:0.2.37
Keystonejs » Keystone » Version: 0.2.38

cpe:2.3:a:keystonejs:keystone:0.2.38
Keystonejs » Keystone » Version: 0.2.39

cpe:2.3:a:keystonejs:keystone:0.2.39
Keystonejs » Keystone » Version: 0.2.4

cpe:2.3:a:keystonejs:keystone:0.2.4
Keystonejs » Keystone » Version: 0.2.40

cpe:2.3:a:keystonejs:keystone:0.2.40
Keystonejs » Keystone » Version: 0.2.41

cpe:2.3:a:keystonejs:keystone:0.2.41
Keystonejs » Keystone » Version: 0.2.42

cpe:2.3:a:keystonejs:keystone:0.2.42
Keystonejs » Keystone » Version: 0.2.5

cpe:2.3:a:keystonejs:keystone:0.2.5
Keystonejs » Keystone » Version: 0.2.6

cpe:2.3:a:keystonejs:keystone:0.2.6
Keystonejs » Keystone » Version: 0.2.7

cpe:2.3:a:keystonejs:keystone:0.2.7
Keystonejs » Keystone » Version: 0.2.8

cpe:2.3:a:keystonejs:keystone:0.2.8
Keystonejs » Keystone » Version: 0.2.9

cpe:2.3:a:keystonejs:keystone:0.2.9
Keystonejs » Keystone » Version: 0.3.0

cpe:2.3:a:keystonejs:keystone:0.3.0
Keystonejs » Keystone » Version: 0.3.1

cpe:2.3:a:keystonejs:keystone:0.3.1
Keystonejs » Keystone » Version: 0.3.10

cpe:2.3:a:keystonejs:keystone:0.3.10
Keystonejs » Keystone » Version: 0.3.11

cpe:2.3:a:keystonejs:keystone:0.3.11
Keystonejs » Keystone » Version: 0.3.12

cpe:2.3:a:keystonejs:keystone:0.3.12
Keystonejs » Keystone » Version: 0.3.13

cpe:2.3:a:keystonejs:keystone:0.3.13
Keystonejs » Keystone » Version: 0.3.14

cpe:2.3:a:keystonejs:keystone:0.3.14
Keystonejs » Keystone » Version: 0.3.15

cpe:2.3:a:keystonejs:keystone:0.3.15
Keystonejs » Keystone » Version: 0.3.16

cpe:2.3:a:keystonejs:keystone:0.3.16
Keystonejs » Keystone » Version: 0.3.17

cpe:2.3:a:keystonejs:keystone:0.3.17
Keystonejs » Keystone » Version: 0.3.18

cpe:2.3:a:keystonejs:keystone:0.3.18
Keystonejs » Keystone » Version: 0.3.19

cpe:2.3:a:keystonejs:keystone:0.3.19
Keystonejs » Keystone » Version: 0.3.2

cpe:2.3:a:keystonejs:keystone:0.3.2
Keystonejs » Keystone » Version: 0.3.20

cpe:2.3:a:keystonejs:keystone:0.3.20
Keystonejs » Keystone » Version: 0.3.21

cpe:2.3:a:keystonejs:keystone:0.3.21
Keystonejs » Keystone » Version: 0.3.22

cpe:2.3:a:keystonejs:keystone:0.3.22
Keystonejs » Keystone » Version: 0.3.3

cpe:2.3:a:keystonejs:keystone:0.3.3
Keystonejs » Keystone » Version: 0.3.4

cpe:2.3:a:keystonejs:keystone:0.3.4
Keystonejs » Keystone » Version: 0.3.5

cpe:2.3:a:keystonejs:keystone:0.3.5
Keystonejs » Keystone » Version: 0.3.6

cpe:2.3:a:keystonejs:keystone:0.3.6
Keystonejs » Keystone » Version: 0.3.7

cpe:2.3:a:keystonejs:keystone:0.3.7
Keystonejs » Keystone » Version: 0.3.8

cpe:2.3:a:keystonejs:keystone:0.3.8
Keystonejs » Keystone » Version: 0.3.9

cpe:2.3:a:keystonejs:keystone:0.3.9
Keystonejs » Keystone » Version: 2.2.0

cpe:2.3:a:keystonejs:keystone:2.2.0
Keystonejs » Keystone » Version: 2.3.0

cpe:2.3:a:keystonejs:keystone:2.3.0
Keystonejs » Keystone » Version: 2.3.1

cpe:2.3:a:keystonejs:keystone:2.3.1
Keystonejs » Keystone » Version: 3.0.0

cpe:2.3:a:keystonejs:keystone:3.0.0
Keystonejs » Keystone » Version: 3.0.1

cpe:2.3:a:keystonejs:keystone:3.0.1
Keystonejs » Keystone » Version: 4.0.0

cpe:2.3:a:keystonejs:keystone:4.0.0
Keystonejs » Keystone » Version: 4.1.0

cpe:2.3:a:keystonejs:keystone:4.1.0
Keystonejs » Keystone » Version: 4.1.1

cpe:2.3:a:keystonejs:keystone:4.1.1
Keystonejs » Keystone » Version: 4.2.0

cpe:2.3:a:keystonejs:keystone:4.2.0
Keystonejs » Keystone » Version: 4.2.1

cpe:2.3:a:keystonejs:keystone:4.2.1
Keystonejs » Keystone » Version: 5.0.0

cpe:2.3:a:keystonejs:keystone:5.0.0
Keystonejs » Keystone » Version: 5.1.0

cpe:2.3:a:keystonejs:keystone:5.1.0
Keystonejs » Keystone » Version: 5.1.1

cpe:2.3:a:keystonejs:keystone:5.1.1
Keystonejs » Keystone » Version: 5.2.0

cpe:2.3:a:keystonejs:keystone:5.2.0
Keystonejs » Keystone » Version: 5.2.1

cpe:2.3:a:keystonejs:keystone:5.2.1
Keystonejs » Keystone » Version: 5.3.0

cpe:2.3:a:keystonejs:keystone:5.3.0
Keystonejs » Keystone » Version: 5.4.0

cpe:2.3:a:keystonejs:keystone:5.4.0
Keystonejs » Keystone » Version: 5.4.1

cpe:2.3:a:keystonejs:keystone:5.4.1
Keystonejs » Keystone » Version: 5.4.2

cpe:2.3:a:keystonejs:keystone:5.4.2
Keystonejs » Keystone » Version: 5.4.3

cpe:2.3:a:keystonejs:keystone:5.4.3
Keystonejs » Keystone » Version: 5.4.4

cpe:2.3:a:keystonejs:keystone:5.4.4
Keystonejs » Keystone » Version: 5.5.0

cpe:2.3:a:keystonejs:keystone:5.5.0
Keystonejs » Keystone » Version: 5.6.0

cpe:2.3:a:keystonejs:keystone:5.6.0
Keystonejs » Keystone » Version: 6.0.0

cpe:2.3:a:keystonejs:keystone:6.0.0
Keystonejs » Keystone » Version: 6.0.1

cpe:2.3:a:keystonejs:keystone:6.0.1
Keystonejs » Keystone » Version: 6.0.2

cpe:2.3:a:keystonejs:keystone:6.0.2
Keystonejs » Keystone » Version: 6.5.0

cpe:2.3:a:keystonejs:keystone:6.5.0
Keystonejs » Keystone » Version: 6.5.1

cpe:2.3:a:keystonejs:keystone:6.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-33326

Products

Pricing

Contact Us