Login Request a demo
EX
Product
executor-legacy-ws
by @graphql-tools · last CVE Oct 28, 2026
3
CVEs
0
On KEV
8.2
Max CVSS
3
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 1Low 0
Severity
All severities3Critical0High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add executor-legacy-ws to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-118665
New
8.2–Oct 28
GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
Affected: < 1.1.36
CVE-2026-103921
7.4
0%
Oct 1
GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor
Affected: < 1.1.35
Showing 2