Approved changes feed: RSS · Atom

cpe:2.3:a:birkir:prime:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBirkir (93d66549-ed15-582f-afb1-2bb06708b719)
ProductPrime (207b53f7-e4a0-5ec9-ac86-3a31011d6eba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/birkir/prime purl2cpe 2026-06-01 10:13:26.248767

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1175 vulnerable 2026-06-08 07:47:14.419204 birkir prime GraphQL Directive graphql information exposure
MEDIUM (5.3)
A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-01-19T20:32:08.955Z
Updated: 2026-02-23T08:49:09.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1174 vulnerable 2026-06-08 07:47:14.418779 birkir prime GraphQL Alias graphql resource consumption
MEDIUM (5.3)
A vulnerability was determined in birkir prime up to 0.4.0.beta.0. This affects an unknown function of the file /graphql of the component GraphQL Alias Handler. This manipulation causes resource consumption. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-01-19T20:02:05.914Z
Updated: 2026-02-23T08:48:57.030Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1173 vulnerable 2026-06-08 07:47:14.418448 birkir prime GraphQL Array Based Query Batch graphql denial of service
MEDIUM (5.3)
A vulnerability was found in birkir prime up to 0.4.0.beta.0. The impacted element is an unknown function of the file /graphql of the component GraphQL Array Based Query Batch Handler. The manipulation results in denial of service. The attack can be executed remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-01-19T19:32:06.326Z
Updated: 2026-02-23T08:48:43.290Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1172 vulnerable 2026-06-08 07:47:14.418011 birkir prime GraphQL Directive graphql denial of service
MEDIUM (5.3)
A vulnerability has been found in birkir prime up to 0.4.0.beta.0. The affected element is an unknown function of the file /graphql of the component GraphQL Directive Handler. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-01-19T19:02:06.494Z
Updated: 2026-02-23T08:48:31.003Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1171 vulnerable 2026-06-08 07:47:14.417534 birkir prime GraphQL Field graphql denial of service
MEDIUM (5.3)
A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the component GraphQL Field Handler. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-01-19T18:32:06.842Z
Updated: 2026-02-23T08:48:18.220Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1170 vulnerable 2026-06-08 07:47:14.417189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1169 vulnerable 2026-06-08 07:47:14.416781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-15550 vulnerable 2026-06-08 07:06:36.432238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.