npm/@apollo/server: low
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
Action: Upgrade @apollo/server to 4.7.4 or later.
npm i @apollo/server@4.7.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.7.1 | 4.7.4 | - |
Fixed versions
| 4.7.4 |
Sources
- osv: GHSA-68jh-rf6x-836f
- https://github.com/apollographql/apollo-server/security/advisories/GHSA-68jh-rf6x-836f
- https://github.com/apollographql/apollo-server/commit/0adaf80d1ee51d8c7e5fd863c04478536d15eb8c
- https://github.com/apollographql/apollo-server
published · modified · JSON