graphql-tools vulnerabilities
CVEs whose affected-version data names the graphql-tools package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-104852High· 8.2GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited properties while recursively merging source objects and does n…
▾ Twilightardatan · graphql-toolsEPSS 0.36%via NVD
CVE-2026-103921High· 7.4GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas
GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certificate rejection off for Node.js connections to wss:// end…
▾ Twilightardatan · graphql-toolsEPSS 0.27%via NVD