Packagist/drupal/graphql CVE-2020-13675: unknown, EPSS 1.39%

This advisory addresses a similar issue to [Drupal core - Moderately critical - Access bypass - SA-CORE-2021-008](https://www.drupal.org/sa-core-2021-008).

Action: Upgrade drupal/graphql to 4.2.0 or later.

composer require drupal/graphql:4.2.0

Affected

introduced	fixed	last affected
4.0.0	4.2.0	-

Fixed versions

4.2.0

Sources

osv: DRUPAL-CONTRIB-2021-029
https://www.drupal.org/sa-contrib-2021-029

CVE-2020-13675 · published 2021-09-15T15:30:15Z · modified 2026-09-10T03:45:54.704874218Z · JSON