Skip to content
OpenAdvisories

Package · npm

graphql-playground-html

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2020-4038

    Reflected XSS in GraphQL Playground

    GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method could trigger this vulnerability. This has been patched in g…

    prisma-labs graphql-playground graphql-playground-html npm