urql-graphql/urql

urql-graphql/urql

GitHubGitHub
GitHubgithub.com
urql.devurql.dev
Releases680
Frequency4 days 12 hours
Last Release
Stars8.97K
The highly customizable and versatile GraphQL client with which you add on features like normalized caching as you grow.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2024-24556NVD↗
< 1.1.17.2 HIGH—

urql is a GraphQL client that exposes a set of helpers for several frameworks. The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream. To fix this vulnerability upgrade to version 1.1.1