This vulnerability in keystonejs keystone involves resource consumption triggered via the GraphQL API Endpoint, due to an issue in the output-field.ts source file. The flaw can be exploited remotely without user interaction or privileges beyond low-level access. The exploit code is publicly available. The fix is not yet officially released, as the pull request awaits acceptance.

Exploitation of this vulnerability can lead to increased resource consumption on affected systems, which may degrade performance or cause denial of service conditions. There is no indication of privilege escalation, data disclosure, or code execution. The impact is limited to resource exhaustion.

No official patch or fix is currently available. The vendor has a pending pull request to address the issue, but it is not yet accepted. Users should monitor the vendor's advisories for the release of an official fix. Until then, consider limiting access to the GraphQL API Endpoint and applying any relevant rate limiting or resource usage controls to mitigate potential exploitation.