npm/apollo-server-core: medium
Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.13.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9q82-xgwf-vj6h#npm/apollo-server-core
- https://github.com/apollographql/apollo-server/security/advisories/GHSA-9q82-xgwf-vj6h
- https://github.com/apollographql/router/security/advisories/GHSA-hff2-gcpx-8f4p
- https://github.com/apollographql/apollo-server/commit/ada12001c4e95b5c779d80314a5a32e33087b5cf
- https://github.com/apollographql/apollo-server
- https://github.com/apollographql/apollo-server/releases/tag/@apollo/server@5.5.0
- https://www.apollographql.com/docs/apollo-server/previous-versions
published · modified · JSON