Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/graphql-code-generator@0.18.2
purl pkg:npm/graphql-code-generator@0.18.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gcg7-xeh3-xyfv Insecure Default Configuration in graphql-code-generator Versions of `graphql-code-generator` have an Insecure Default Configuration. The packages sets `NODE_TLS_REJECT_UNAUTHORIZED` to 0, disabling certificate verification for the entire project. This results in Insecure Communication for the process. GHSA-9w87-4j72-gcv7
GMS-2020-278

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T17:21:37.907706+00:00 GithubOSV Importer Fixing VCID-gcg7-xeh3-xyfv https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/09/GHSA-9w87-4j72-gcv7/GHSA-9w87-4j72-gcv7.json 38.6.0
2026-06-04T16:20:15.428620+00:00 GitLab Importer Fixing VCID-gcg7-xeh3-xyfv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/graphql-code-generator/GMS-2020-278.yml 38.6.0