CVE-2023-22477
1 advisory.
npm/mercurius CVE-2023-22477: medium 5.3, EPSS 1.09%
mercurius has Uncaught Exception when using subscriptions
Action: Upgrade mercurius to 8.13.2 or later.
npm i mercurius@11.5.0npm i mercurius@8.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.0.0 | 11.5.0 | - |
| 0 | 8.13.2 | - |
Fixed versions
| 11.5.0 | 8.13.2 |
Sources
- osv: GHSA-cm8h-q92v-xcfc
- https://github.com/mercurius-js/mercurius/security/advisories/GHSA-cm8h-q92v-xcfc
- https://nvd.nist.gov/vuln/detail/CVE-2023-22477
- https://github.com/mercurius-js/mercurius/issues/939
- https://github.com/fastify/fastify-websocket/pull/228
- https://github.com/mercurius-js/mercurius/pull/940
- https://github.com/mercurius-js/mercurius
CVE-2023-22477 · published · modified · JSON