Lookup for vulnerable packages by Package URL.

Purlpkg:npm/%40envelop/graphql-modules@4.0.6-alpha-20230218005302-cb189ada
Typenpm
Namespace@envelop
Namegraphql-modules
Version4.0.6-alpha-20230218005302-cb189ada
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.1.0
Latest_non_vulnerable_version9.1.0
Affected_by_vulnerabilities
0
url VCID-pxvg-dr5p-aqf8
vulnerability_id VCID-pxvg-dr5p-aqf8
summary
@envelop/graphql-modules has a Race Condition vulnerability
Context race condition when using `useGraphQLModules` plugin
references
0
reference_url https://github.com/graphql-hive/envelop
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/graphql-hive/envelop
1
reference_url https://github.com/graphql-hive/envelop/commit/ab49fa259a51d976c437e084114e070b99720ba9
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/graphql-hive/envelop/commit/ab49fa259a51d976c437e084114e070b99720ba9
2
reference_url https://github.com/graphql-hive/envelop/releases/tag/release-1768928934700
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/graphql-hive/envelop/releases/tag/release-1768928934700
3
reference_url https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7
reference_id GHSA-53wg-r69p-v3r7
reference_type
scores
0
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7
4
reference_url https://github.com/advisories/GHSA-h3hw-29fv-2x75
reference_id GHSA-h3hw-29fv-2x75
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h3hw-29fv-2x75
5
reference_url https://github.com/graphql-hive/envelop/security/advisories/GHSA-h3hw-29fv-2x75
reference_id GHSA-h3hw-29fv-2x75
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/graphql-hive/envelop/security/advisories/GHSA-h3hw-29fv-2x75
fixed_packages
0
url pkg:npm/%40envelop/graphql-modules@9.1.0
purl pkg:npm/%40envelop/graphql-modules@9.1.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540envelop/graphql-modules@9.1.0
aliases GHSA-h3hw-29fv-2x75
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pxvg-dr5p-aqf8
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/%2540envelop/graphql-modules@4.0.6-alpha-20230218005302-cb189ada