CVE-2025-27097
1 advisory.
npm/@graphql-mesh/runtime CVE-2025-27097: medium, EPSS 0.43%
Cache variables with the operations when transforms exist on the root level even if variables change in the further requests with the same operation
Action: Upgrade @graphql-mesh/runtime to 0.96.9 or later.
npm i @graphql-mesh/runtime@0.96.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.96.5 | 0.96.9 | - |
Fixed versions
| 0.96.9 |
Sources
- osv: GHSA-rr4x-crhf-8886
- https://github.com/Urigo/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886
- https://github.com/ardatan/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886
- https://nvd.nist.gov/vuln/detail/CVE-2025-27097
- https://github.com/Urigo/graphql-mesh/commit/482d813a9f75935024aa77872125d197f5fca3d0
- https://github.com/Urigo/graphql-mesh
- https://github.com/Urigo/graphql-mesh/releases/tag/release-1696859949678
CVE-2025-27097 · published · modified · JSON