| Package | Affected versions | Patched versions |
|---|---|---|
| data.all | ≥ 1.0.0, < 2.6.1 | 2.6.1 |
An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free