| Package | Affected versions | Patched versions |
|---|---|---|
| coral talk | ≥ 4.0.0, < 4.12.1 | 4.12.1 |
Talk 4 in Coral before 4.12.1 allows remote attackers to discover e-mail addresses and other sensitive information via GraphQL because permission checks use an incorrect data type.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free