https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:57:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-244979 EUVD-2026-244979 https://cve.radiocsirt.org/vuln/euvd-2026-244979 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23841 <p>apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input (e.g. by redirecting a user to a specifically-crafted link) or arrange to have malicious input be returned by a GraphQL server (e.g. by persisting it in a database). To fix this issue, please update to version 0.7.0 or later.</p> <p>apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input (e.g. by redirecting a user to a specifically-crafted link) or arrange to have malicious input be returned by a GraphQL server (e.g. by persisting it in a database). To fix this issue, please update to version 0.7.0 or later.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23841 https://cve.radiocsirt.org/vuln/ghsa-rv8p-rr2h-fgpg <p><strong>Affected:</strong> npm: @apollo/experimental-nextjs-app-support</p> <p>### Impact</p> <p>The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. This vulnerability arises from improper handling of untrusted input when @apollo/experimental-apollo-client-nextjs performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.</p> <p>### Patches</p> <p>To fix this issue, please update to version 0.7.0 or later.</p> <p>### Workarounds</p> <p>There are no known workarounds for this issue. Please update to version 0.7.0</p> <p><strong>Affected:</strong> npm: @apollo/experimental-nextjs-app-support</p> <p>### Impact</p> <p>The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. This vulnerability arises from improper handling of untrusted input when @apollo/experimental-apollo-client-nextjs performs server-side rendering of HTML pages. To fix this vulnerability, we implemented appropriate escaping to prevent javascript injection into rendered pages.</p> <p>### Patches</p> <p>To fix this issue, please update to version 0.7.0 or later.</p> <p>### Workarounds</p> <p>There are no known workarounds for this issue. Please update to version 0.7.0</p> https://cve.radiocsirt.org/vuln/ghsa-rv8p-rr2h-fgpg https://cve.radiocsirt.org/vuln/gsd-2024-23841 gsd-2024-23841 https://cve.radiocsirt.org/vuln/gsd-2024-23841