graphql
17.0.2 · 3 Jul 2026MIT28.1M / weekRepositorynpmAtom feed
Security advisories
From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.
Is your project affected?
Paste your package.json, or type the range you declare for graphql. It is read in your browser and sent nowhere.
| Line | Newest | Where it stands |
|---|---|---|
| 17.0.2 | No known advisory | |
| 16.14.2 | Safe from 16.8.1 | |
| 15.10.3 | No known advisory |
- Moderategraphql Uncontrolled Resource Consumption vulnerabilityGHSA-9pv7-vfvm-6vr7 · 20 Sep 2023
- 16.x16.3.0 – 16.8.0Fixed in 16.8.1
Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.