{"action":"Upgrade @envelop/graphql-modules to 9.1.0 or later.","affected":[{"fixed":"9.1.0","introduced":"0"}],"component":"@envelop/graphql-modules","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["9.1.0"],"ghsa_id":"GHSA-h3hw-29fv-2x75","id":"tcs_01M5KFSZNFH60727VKS2M7P1TQ","modified_at":"2026-02-03T03:04:17.118258Z","published_at":"2026-01-21T16:36:27Z","references":["https://osv.dev/vulnerability/GHSA-h3hw-29fv-2x75","https://github.com/graphql-hive/envelop/security/advisories/GHSA-h3hw-29fv-2x75","https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7","https://github.com/graphql-hive/envelop/commit/ab49fa259a51d976c437e084114e070b99720ba9","https://github.com/graphql-hive/envelop","https://github.com/graphql-hive/envelop/releases/tag/release-1768928934700"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-h3hw-29fv-2x75","url":"https://osv.dev/vulnerability/GHSA-h3hw-29fv-2x75"}],"summary":"@envelop/graphql-modules has a Race Condition vulnerability"}