@envelop/graphql-modules has a Race Condition vulnerability

Description

Context race condition when using useGraphQLModules plugin

Recommendation

Update the @envelop/graphql-modules package to the latest compatible version. Followings are version details:

• Affected version(s): < 9.1.0
• Patched version(s): 9.1.0

References

• GHSA-h3hw-29fv-2x75
• CWE-362

Related Issues

• jsPDF has Shared State Race Condition in addJS Plugin - CVE-2026-24040
• React Router has XSS Vulnerability - CVE-2025-59057
• Vega has Cross-site Scripting vulnerability in `lassoAppend` function - CVE-2023-26487
• Valibot has a ReDoS vulnerability in `EMOJI_REGEX` - CVE-2025-66020

You might also like:

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

Tags:

npm

@envelop/graphql-modules