@graphql-tools/executor-legacy-ws vulnerabilities
CVEs whose affected-version data names the @graphql-tools/executor-legacy-ws package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-118666MediumGraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller
▾ Sunlitgraphql-tools · @graphql-tools/executor-legacy-wsvia GHSA
CVE-2026-118665HighGraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications
▾ Twilightgraphql-tools · @graphql-tools/executor-legacy-wsvia GHSA