CVE-2026-1175CWE-200CWE-209

birkir prime GraphQL Directive graphql information exposure

Medium · published January 19, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00495 · 41.6th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2026-01-19T20:32Z
EPSS history
Timeline
  • 19 JAN 20:32Z
    birkir prime GraphQL Directive graphql information exposure
    cvelistv5