Skip to main content
cve.nowby Sazabi
← npm
npmPackage

@neo4j/graphql

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Weekly downloads
38K
Registry
npm

Advisories 2

  • Privilege Escalation via Dropped Field-Level @authentication

    Affected: from 7.0.0, fixed in 7.6.0; from 5.2.0, fixed in 5.12.15; from 6.0.0, through 6.6.4.

  • Subscription Authentication Bypass via Unverified connectionParams.jwt

    Affected: from 7.0.0, fixed in 7.5.6; from 5.0.0, fixed in 5.12.14; from 6.0.0, through 6.6.4.