npm/@apollo/composition: high 7.5
Apollo Federation has Improper Enforcement of Access Control on Transitive Fields
Action: Upgrade @apollo/composition to 2.9.5 or later.
npm i @apollo/composition@2.9.5npm i @apollo/composition@2.10.4npm i @apollo/composition@2.11.5npm i @apollo/composition@2.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.9.5 | - |
| 2.10.0-alpha.3 | 2.10.4 | - |
| 2.11.0-preview.1 | 2.11.5 | - |
| 2.12.0-preview.0 | 2.12.1 | - |
Fixed versions
| 2.9.5 | 2.10.4 | 2.11.5 | 2.12.1 |
Sources
- osv: GHSA-m8jr-fxqx-8xx6
- https://github.com/apollographql/federation/security/advisories/GHSA-m8jr-fxqx-8xx6
- https://github.com/apollographql/federation/commit/09e596e6a0c753071ca822e84f525d73ada395cf
- https://github.com/apollographql/federation/commit/0d8fca1c8cc375bb8486f11f339984b69267417d
- https://github.com/apollographql/federation/commit/20c75d1d60a48fc289d88c8d29652f1afc7553e4
- https://github.com/apollographql/federation/commit/e1c58611c3c996b4fff98a54e49f00549ff2115d
- https://github.com/apollographql/federation
published · modified · JSON