Skip to content
OpenAdvisories

Package · npm

graphql-shield

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low —
    GHSA-hx78-272p-mqqh

    Authorization Bypass in graphql-shield

    Versions of `graphql-shield` prior to 6.0.6 are vulnerable to an Authorization Bypass. The rule caching option `no_cache` relies on keys generated by cryptographically insecure functions, which may cause rules to be incorrectly cached. This allows attackers t…

    graphql-shield npm