PT-2020-21588 · Microsoft · Type-Graphql
Published
2020-09-04
·
Updated
2020-09-04
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
type-graphql versions prior to 0.17.6
Description
The issue concerns information exposure where the package leaks the resolver source code in an error message. This error can be forced when no subscription topics are provided in the request.
Recommendations
Upgrade to version 0.17.6 or later.
Generation of Error Message Containing Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Type-Graphql