{"action":"Upgrade @apollo/server to 4.9.3 or later.","affected":[{"fixed":"4.9.3","introduced":"0"}],"component":"@apollo/server","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["4.9.3"],"ghsa_id":"GHSA-j5g3-5c8r-7qfx","id":"tcs_01M5KFX1MW017Y1R0D1PFVP4QD","modified_at":"2023-08-30T21:24:57Z","published_at":"2023-08-30T21:24:57Z","references":["https://osv.dev/vulnerability/GHSA-j5g3-5c8r-7qfx","https://github.com/apollographql/apollo-server/security/advisories/GHSA-j5g3-5c8r-7qfx","https://github.com/apollographql/apollo-server/commit/2c8106c433c4add4b43e2e2b2f5c5c4887b17314","https://github.com/apollographql/apollo-server/commit/d38b43bac88acdef4295759d7dcc3d4c348d9575","https://github.com/apollographql/apollo-server"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j5g3-5c8r-7qfx","url":"https://osv.dev/vulnerability/GHSA-j5g3-5c8r-7qfx"}],"summary":"Prevent logging invalid header values"}