npm/@asymmetric-effort/specifyjs: medium
@asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection
Action: Upgrade @asymmetric-effort/specifyjs to 0.2.136 or later.
npm i @asymmetric-effort/specifyjs@0.2.136Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.2.136 | - |
Fixed versions
| 0.2.136 |
Sources
- osv: GHSA-5c7w-4wm3-85vw
- https://github.com/asymmetric-effort/specifyjs/security/advisories/GHSA-5c7w-4wm3-85vw
- https://github.com/asymmetric-effort/specifyjs/commit/25d1fb491d99479efdf501f5f75e0bb80c908f0a
- https://github.com/asymmetric-effort/specifyjs
published · modified · JSON