PT-2020-21588

Published

2020-09-04

·

Updated

2020-09-04

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Name of the Vulnerable Software and Affected Versions type-graphql versions prior to 0.17.6
Description The issue concerns information exposure where the package leaks the resolver source code in an error message. This error can be forced when no subscription topics are provided in the request.
Recommendations Upgrade to version 0.17.6 or later.
Impacts
Vendors
Affected products
Related identifiers
GHSA-XF64-2F9P-6PQQ
Found an issue in the description? Have something to add? Feel free to write us 👾