npm/apollo-server: high
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
Action: Upgrade apollo-server to 2.25.3 or later.
npm i apollo-server@2.25.3npm i apollo-server@3.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.25.3 | - |
| 3.0.0 | 3.4.1 | - |
Fixed versions
| 2.25.3 | 3.4.1 |
Sources
- osv: GHSA-qm7x-rc44-rrqw
- https://github.com/apollographql/apollo-server/security/advisories/GHSA-qm7x-rc44-rrqw
- https://github.com/apollographql/apollo-server
published · modified · JSON