envelop @envelop/graphql-modules vulnerabilities

Latest envelop @envelop/graphql-modules CVEs

Newest publication first

1. GHSA-h3hw-29fv-2x75 @envelop/graphql-modules has a Race Condition vulnerability

   Published 2026-01-21

   High·CVSS 8.7

   Summary Context race condition when using useGraphQLModules plugin Details Related to: https://github.com/graphql-hive/graphql-modules/security/advisories/GHSA-53wg-r69p-v3r7 When 2 or more parallel requests are made which trigger the same service, the context of the requests is...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.