| Package | Affected versions | Patched versions |
|---|---|---|
| evershop | = 1.0.0 | |
| @evershop/evershop | < 1.0.0-rc.9 | 1.0.0-rc.9 |
Lack of authentication in NPM's package @evershop/evershop before version 1.0.0-rc.9, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free