npm/apollo-server-core: medium
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
Action: Upgrade apollo-server-core to 3.10.1 or later.
npm i apollo-server-core@3.10.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.10.1 | - |
Fixed versions
| 3.10.1 |
Sources
- osv: GHSA-2fvv-qxrq-7jq6
- https://github.com/apollographql/apollo-server/security/advisories/GHSA-2fvv-qxrq-7jq6
- https://github.com/apollographql/apollo-server/commit/68a439b6e3af9edc8a2480092f2d49f058be1e64
- https://github.com/apollographql/apollo-server
published · modified · JSON