Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/02 7:0 p.m.11 views

GHSA-5C7W-4WM3-85VW @asymmetric-effort/specifyjs: GraphQL gql tag allows metacharacter injection

Finding Location: core/src/client/graphql.ts:66-80 The gql template tag function warned about interpolated values containing GraphQL metacharacters : but still concatenated them into the query string, enabling potential GraphQL injection. Status Fixed in v0.2.136 — The gql function now throws an...

6.9CVSS5.8AI score
SaveExploits0References3
Rows per page
Query Builder