CVE-2022-0087: Keystonejs Keystone

Medium severity, CVSS 6.1. EPSS: 2.6% chance of exploitation in the next 30 days.

keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

• Keystonejs Keystone: before 1.0.2 (fixed in 1.0.2)

Published 2022-01-12. Last modified 2026-06-17.