pypi package report

Is graphql-shield safe?

1 known vulnerability.

cvss

not scored

how bad it is if exploited, out of 10

epss

not scored

chance of exploitation in the next 30 days

xyz score

1.7

CyberXYZ composite, out of 10

fig. 01 — GHSA-hx78-272p-mqqh, the advisory selected below

// advisories

GHSA-hx78-272p-mqqh

UNKNOWN

Versions of graphql-shield prior to 6.0.6 are vulnerable to an Authorization Bypass. The rule caching option nocache relies on keys generated by cryptographically insecure functions, which may cause rules to be incorrectly cached. This allows attackers to access information they should not have access to in case of a key collision.

Affected: >=0, <6.0.6
Fixed in: not stated
Weakness: CWE-285
Published: 2020-09-03
Source: osv

OSV

// dependencies

0 direct

// ai model usage

No published models are known to use this package.

Checked 2026-09-22 at 01:45 UTC. The most recent advisory here was published 2020-09-03. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is graphql-shield safe? pypi package security report | CyberXYZ