Threats affecting pkg:github/graphprotocol/contracts

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.2%	CVE-2026-28410graphprotocol contracts · Improper Access Control Medium5.3EPSS 0.2%2026-03-05CVE Database V5CVE-2026-28410 The Graph is an indexing protocol for querying networks like Ethereum, IPFS, Polygon, and other blockchains. Prior to version 3.0.0, a flaw in the token vesting contracts allows users to access tokens that should still be locked according to their vesting schedule. This issue has been patched in version 3.0.0. EPSS 0.2%Vulnerability CWE-284	CVE Database V5	2026-03-05

Page 1 of 1