WS-2019-0352

Information Exposure found in type-graphql before 0.17.6. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request...

PT-2020-21588

Name of the Vulnerable Software and Affected Versions type-graphql versions prior to 0.17.6 Description The issue concerns information exposure where the package leaks the resolver source code in an error message. This error can be forced when no subscription topics are provided in the request...

Information Exposure

Overview Versions of type-graphql prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later...