Lucene search
+L

3 matches found

OSV
OSV
added 2020/09/04 5:24 p.m.3 views

GHSA-XF64-2F9P-6PQQ Information Exposure in type-graphql

Versions of type-graphql prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later...

5.9AI score
SaveExploits0References2
Veracode
Veracode
added 2019/12/24 1:16 a.m.13 views

Information Disclosure

type-graphql is vulnerable to information disclosure. The full resolver source is disclosed in error messages when no subscription topics are provided due to improper parsing of the target parameter in MissingSubscriptionTopicsError.ts...

1.5AI score
SaveExploits0
Node.js
Node.js
added 2019/12/23 2:7 p.m.19 views

Information Exposure

Overview Versions of type-graphql prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later...

6.9AI score
SaveExploits0Affected Software1
Rows per page
Query Builder