2026-07-01
📦 keystonejsView on GitHub →
🐛 1 fixes🔧 1 symbols
Summary
This release addresses a security vulnerability related to the `graphql.maxTake` setting. The fix prevents bypassing the intended `maxTake` value by ensuring negative inputs are handled correctly.
🐛 Bug Fixes
- Fixed a security vulnerability where the `graphql.maxTake` value could be bypassed by providing a negative input, allowing queries to return more results than intended.