CVE-2020-4038
1 advisory.
npm/graphql-playground-html CVE-2020-4038: high 7.4
Reflected XSS in GraphQL Playground
Action: Upgrade graphql-playground-html to 1.6.22 or later.
npm i graphql-playground-html@1.6.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.22 | - |
Fixed versions
| 1.6.22 |
Sources
- osv: GHSA-4852-vrh7-28rf
- https://github.com/graphql/graphql-playground/security/advisories/GHSA-4852-vrh7-28rf
- https://github.com/prisma-labs/graphql-playground/security/advisories/GHSA-4852-vrh7-28rf
- https://nvd.nist.gov/vuln/detail/CVE-2020-4038
- https://github.com/prisma-labs/graphql-playground/commit/bf1883db538c97b076801a60677733816cb3cfb7
- https://github.com/prisma-labs/graphql-playground#security-details
CVE-2020-4038 · published · modified · JSON