← ターゲット選定に戻る

CMS

keystonejs/keystone

The superpowered headless CMS for Node.js — built with GraphQL and React

#cms#cms-framework#graphql#nodejs#react#keystonejs

スコア

95

/ 100

Star

9,874

Fork

1,255

Open Issue

101

サイズ

371MB

言語

TypeScript ★

最終push

3 日前

Docker

—

採点内訳

過去CVE 7件 (適量)

✓

直近 push: 3 日前

✓

得意言語 (TypeScript)

✓

オープンissue 101件

✓

大規模 (371MB)

—

Docker 未対応

—

1k–10k: 初心者ベスト (★9,874)

✓

※ 各項目の重みは「採点ルール」を参照。合計は 0 で底打ち。

過去の SecurityAdvisory (8 件)

MEDIUMGHSA-cgcg-q9jh-5pr2 CVE-2026-333262026/3/19
@keystone-6/core: `isFilterable` bypass via `cursor` parameter in findMany (CVE-2025-46720 incomplete fix)
LOWGHSA-hg9m-67mm-7pg3 CVE-2025-467202025/5/5
Field-level `isFilterable` bypass for update and delete mutations
MEDIUMGHSA-9cvc-v7wm-992c CVE-2023-400272023/8/15
When `ui.isAccessAllowed` is undefined, the admin meta GraphQL query is publicly accessible
LOWGHSA-jqxr-vjvv-899m CVE-2023-342472023/6/13
Open redirect in @keystone-6/auth
LOWGHSA-5fp6-4xw3-xqq32023/6/11
k-sortable identifiers, `cuid` are the default
CRITICALGHSA-25mx-2mxm-6343 CVE-2022-393822022/11/3
NODE_ENV defaults to development with esbuild
CRITICALGHSA-6mhr-52mv-6v6f CVE-2022-393222022/10/18
Field-level access-control bypass for multiselect field
HIGHGHSA-hrgx-7j6v-xj82 CVE-2022-00872022/1/10
Reflected cross-site scripting (XSS) vulnerability