GitHub Advisoryadvisory · npm

GHSA-xf64-2f9p-6pqq Information Exposure in type-graphql

LOW Published 2020-09-04 Modified 2020-08-31 Official page ↗
Ecosystem
npm
Packages
type-graphql
Severity
Low
Weaknesses
CWE-209
Reviewed
2020-08-31

Affected packages

• npm type-graphql: < 0.17.6 → fixed in 0.17.6

Description

Versions of `type-graphql` prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request. Recommendation Upgrade to version 0.17.6 or later.

Related

Weakness · CWE (1)

  • CWE-209 Generation of Error Message Containing Sensitive Information weakness

References