Skip to content
OpenAdvisories

Package · npm

graphql-code-generator

1 known vulnerabilities.

1 result · Feed

  • High —

    Insecure Default Configuration in graphql-code-generator

    Versions of `graphql-code-generator` prior to 0.18.2 have an Insecure Default Configuration. The packages sets `NODE_TLS_REJECT_UNAUTHORIZED` to 0, disabling certificate verification for the entire project. This results in Insecure Communication for the proce…