Advisories for Npm/Graphql-Playground-Html package

2020

Cross-site Scripting

GraphQL Playground (graphql-playground-html NPM package) has a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method could trigger this vulnerability.