CVE-2021-41249
1 advisory.
npm/graphql-playground-react CVE-2021-41249: high 7.1, EPSS 1.22%
XSS vulnerability in GraphQL Playground from untrusted schemas
Action: Upgrade graphql-playground-react to 1.7.28 or later.
npm i graphql-playground-react@1.7.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.28 | - |
Fixed versions
| 1.7.28 |
Sources
- osv: GHSA-59r9-6jp6-jcm7
- https://github.com/graphql/graphiql/security/advisories/GHSA-x4r7-m2q9-69c8
- https://github.com/graphql/graphql-playground/security/advisories/GHSA-59r9-6jp6-jcm7
- https://nvd.nist.gov/vuln/detail/CVE-2021-41249
- https://github.com/graphql/graphql-playground/commit/b8a956006835992f12c46b90384a79ab82bcadad
- https://github.com/graphql/graphiql/blob/main/docs/security/2021-introspection-schema-xss.md#2-more-details-on-the-vulnerability
- https://github.com/graphql/graphql-playground
CVE-2021-41249 · published · modified · JSON