Description
Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @evershop/evershop | < 1.0.0-rc.9 | 1.0.0-rc.9 | GHSA-ggpm-9qfx-mhwg |