CVE-2022-39240: Mygraph Project Mygraph

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

MyGraph is a permission management system. Versions prior to 1.0.4 are vulnerable to a storage XSS vulnerability leading to Remote Code Execution. This issue is patched in version 1.0.4. There is no known workaround.

Affected products

• Mygraph Project Mygraph: before 1.0.4 (fixed in 1.0.4)

Published 2022-09-24. Last modified 2026-06-17.