Threats affecting pkg:npm/graph-explorer

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.1%	CVE-2026-10584 · HTTPS Fallback to HTTP in Graph Explorer MediumEPSS 0.1%2026-08-20AWS Security Bulletins Bulletin ID: 2026-038-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 06/02/2026 12:15 PM PDT Description: Graph Explorer is an open source application that provides visualization and exploration of data in graph databases such as Amazon Neptune. We identified CVE-2026-10584 where, under certain circumstances, the server silently falls back to HTTP when HTTPS is enabled but certificates are unavailable, resulting in cleartext transmission of sensitive information. Impacted versions: >= 1.1.0 AND < 3.0.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin. EPSS 0.1%Vulnerability #rce #cloud	AWS Security Bulletins	2026-08-20

Page 1 of 1