{"action":"Upgrade @apollo/server to 4.7.4 or later.","affected":[{"fixed":"4.7.4","introduced":"4.7.1"}],"component":"@apollo/server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.7.4"],"ghsa_id":"GHSA-68jh-rf6x-836f","id":"tcs_01M5KF6AMB98WXYDF6P2M2CEX6","modified_at":"2023-06-20T19:50:40Z","published_at":"2023-06-16T19:40:53Z","references":["https://osv.dev/vulnerability/GHSA-68jh-rf6x-836f","https://github.com/apollographql/apollo-server/security/advisories/GHSA-68jh-rf6x-836f","https://github.com/apollographql/apollo-server/commit/0adaf80d1ee51d8c7e5fd863c04478536d15eb8c","https://github.com/apollographql/apollo-server"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-68jh-rf6x-836f","url":"https://osv.dev/vulnerability/GHSA-68jh-rf6x-836f"}],"summary":"@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces"}