{"action":"Upgrade @apollosproject/data-connector-rock to 2.20.0 or later.","affected":[{"fixed":"2.20.0","introduced":"0"}],"component":"@apollosproject/data-connector-rock","cve_ids":["CVE-2021-32691"],"ecosystem":"npm","epss":0.01458,"exploited":false,"fixed_versions":["2.20.0"],"ghsa_id":"GHSA-r578-pj6f-r4ff","id":"tcs_01M5KG7ZYCK90NS4HHBQ82V7RE","modified_at":"2026-07-08T06:28:52.894954069Z","published_at":"2021-06-21T17:07:47Z","references":["https://osv.dev/vulnerability/GHSA-r578-pj6f-r4ff","https://github.com/ApollosProject/apollos-apps/security/advisories/GHSA-r578-pj6f-r4ff","https://nvd.nist.gov/vuln/detail/CVE-2021-32691","https://github.com/ApollosProject/apollos-apps/commit/cb5f8f1c0b24f1b215b2bb5eb6f9a8e16d728ce2","https://github.com/ApollosProject/apollos-apps/releases/tag/v2.20.0"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-r578-pj6f-r4ff","url":"https://osv.dev/vulnerability/GHSA-r578-pj6f-r4ff"}],"summary":"Auto-merging Person Records Compromised"}