Skip to content
OpenAdvisories

Vendor

graphql

2 known vulnerabilities.

Products

graphql-playground 1 graphiql 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2021-41248

    XSS vulnerability in GraphiQL

    GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation. All versions of graphiql older than graphiql@1.4.7 are vulnerable to compromised HTTP schema introspection responses or schema prop value…

    graphql graphiql graphiql npm
  • High 7.1
    CVE-2021-41249

    XSS vulnerability in GraphQL Playground

    GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than graphql-playground-react@1.7.28 are vulnerable to compromised HTTP schema introspection responses or schema prop values wi…

    graphql graphql-playground graphql-playground-react npm