urql-graphql/urql

urql-graphql/urql

GitHubGitHub
GitHubgithub.com
urql.devurql.dev
Releases674
Frequency4 days 11 hours
Last Release
Stars8.95K
The highly customizable and versatile GraphQL client with which you add on features like normalized caching as you grow.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-24556↗
7.2 HIGH—

urql is a GraphQL client that exposes a set of helpers for several frameworks. The `@urql/next` package is vulnerable to XSS. To exploit this an attacker would need to ensure that the response returns `html` tags and that the web-application is using streamed responses (non-RSC). This vulnerability is due to improper escaping of html-like characters in the response-stream. To fix this vulnerability upgrade to version 1.1.1