Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:the-Guild:graphql-Tools:*:*:*:*:*:*:*:*

1 brief RSS
medium advisory

Prototype Pollution in @graphql-tools/utils

An unauthenticated remote denial-of-service vulnerability in @graphql-tools/utils allows attackers to crash node processes via prototype pollution in the mergeDeep utility function.

@graphql-tools/utils vulnerability denial-of-service javascript graphql
1t 1c