CVE-2021-23326

6.3

MEDIUMCVSS v3

Published

January 20, 2021

CVSS v2

7.5 HIGH

Affected

1 project

Assigned by

[email protected]

Severity scale

010

Description

This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection.

ardatan/graphql-tools

GitHub:wrench: Utility library for GraphQL to build, stitch and mock GraphQL schemas in the SDL-first approach

< 6.2.6NVD

More on this CVE

NVD↗GitHub Advisory↗

Security Advisories

CVE-2021-23326

Description

More on this CVE