VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

graphql-modules: vulnerability history, versions and safety

graphql-modules is a package in the npm ecosystem. Vulert records 1 vulnerability for it across 0 release, first recorded in Jan 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded H1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
1 in the last 12 months

Most recent disclosure 16 Jan 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all graphql-modules vulnerabilities

Vulert verdict on graphql-modules 3.1.2 i

Updated on 23 Oct 2026

Good news: 3.1.2, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 1.

Package health score 75/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Little adoption
  • Community Not enough data

What to do: Stay on 3.1.2 or newer. This can change: a vulnerability disclosed tomorrow can affect 3.1.2 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 3.1.2 — unaffected i
  • Vulnerabilities on record 1 over 1 year · 1 in the last year i
  • Latest disclosure 16 Jan 2026 i
  • Highest CVSS 8.7 i
  • With no published fix 0 i
  • Depended on by 6 packages i
  • Last release 4 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for graphql-modules, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
3.2.0-alpha-20260712090108-c3446746cbb6fd1dfccad8a6b96eeaee85d2fa83 12 Jul 2026 none MIT — Details →
3.1.2 26 May 2026 none MIT — Details →
3.1.2-alpha-20260526091739-d4a64c600ffe57ee73a7cd8fafe06965c4c98fe7 26 May 2026 none MIT — Details →
3.1.2-alpha-20260526070141-bd5dfab15cc718486b0ff0541bb82c01ff4942fd 26 May 2026 none MIT — Details →
3.1.2-alpha-20260526063542-b30d1a923e319cb0738fd0db4aa3c71ccc369880 26 May 2026 none MIT — Details →
3.1.2-alpha-20260525172406-80c80002c62d7e63b60d54c3fd1af29b694611c8 25 May 2026 none MIT — Details →
3.1.2-alpha-20260525091447-5ef11746ede586d36efad107a47fb4e977ec177c 25 May 2026 none MIT — Details →
3.1.2-alpha-20260523170740-3bcbb3abb7da1658c00f19c9513764c4caba03f6 23 May 2026 none MIT — Details →
3.1.2-alpha-20260523164813-42a520a571d24cede6cd908c78e07f136e2c89f2 23 May 2026 none MIT — Details →
3.1.2-alpha-20260317220150-9a468825090253a16047e4cf7ba0a105749b9f22 17 Mar 2026 none MIT — Details →
3.1.2-alpha-20260317205650-bb0946d19a1de73899b8cc5c3bb0806cbcccc92c 17 Mar 2026 none MIT — Details →
3.1.2-alpha-20260317205639-52448ab99613b20fea81e4b48159a7a43431360f 17 Mar 2026 none MIT — Details →
3.1.2-alpha-20260317012329-19b21b5966dfaf960c6614013e1989b39b91045c 17 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316180329-c7e94547414009331dbe4847a351559595060db7 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316140419-6cd03ff8455deb1f1c0408ed63cbc4550345d81e 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316024711-5f529c3419187105e0b6537d1065283e3c4ddb7a 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316024400-ecef1468908523996b33ad52b93d81696ff7a601 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316012358-c84eef17bdad268af6e09f309d0e48a6417af642 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260316012303-f6c71a3234b1e57123e6aed051382492b6bfcf7d 16 Mar 2026 none MIT — Details →
3.1.2-alpha-20260314111040-394577009780a4ef93bbd59a669d90d43a29cb36 14 Mar 2026 none MIT — Details →
3.1.2-alpha-20260313135948-aa132b7e0120d57ee2df6daf94ad52be3c8554aa 13 Mar 2026 none MIT — Details →
3.1.2-alpha-20260313135915-94ddd13aef9c0b1237e3c2eb708cdffb66e2330e 13 Mar 2026 none MIT — Details →
3.1.2-alpha-20260312190617-74b3f778fbce9b3db92a01b3f9ff9ee9c956f5b6 12 Mar 2026 none MIT — Details →
3.1.2-alpha-20260311012105-5531588b057bdba12fbe70b9f6ebe38b40dd7633 11 Mar 2026 none MIT — Details →
3.1.2-alpha-20260310104731-df9f677e20d497e636d740d49579954ce4be249a 10 Mar 2026 none MIT — Details →
3.1.2-alpha-20260310052809-f23fd6bc71a27696781e354bb9829c723b6c1a68 10 Mar 2026 none MIT — Details →
3.1.2-alpha-20260309174933-af650ca1a54476df72b85dc8842da963fbb00856 09 Mar 2026 none MIT — Details →
3.1.2-alpha-20260309140821-05498159a412a806a7d405d2cc026af4547aa287 09 Mar 2026 none MIT — Details →
3.1.2-alpha-20260309082044-5f1bc62a05b0a8530a1e72ae0862d4d42003106c 09 Mar 2026 none MIT — Details →
3.1.2-alpha-20260309082035-365e64958c93b278324631867ea86b2270485658 09 Mar 2026 none MIT — Details →
3.1.2-alpha-20260309010243-ae065c4f338808ca44a5e6d0b5f450c1318d1be7 09 Mar 2026 none MIT — Details →
3.1.2-alpha-20260307010821-480b4a08884419f6dd316c68e8f6ec350da0fb4b 07 Mar 2026 none MIT — Details →
3.1.2-alpha-20260306220316-ebd7aabe0d08b154d30ee234ff1a4f7ac1f60d00 06 Mar 2026 none MIT — Details →
3.1.2-alpha-20260306100633-52fa7b3af6606dfc2d9ea9f149e14f4d2cb24cc4 06 Mar 2026 none MIT — Details →
3.1.2-alpha-20260306021503-7b1c847a9b90ba18cf16e7fd5de99887ddc5f6cd 06 Mar 2026 none MIT — Details →
3.1.2-alpha-20260305204237-dd451433392a2afd18a8e352628e37f1b350a1c9 05 Mar 2026 none MIT — Details →
3.1.2-alpha-20260304214934-4af58e873d497afa0dca9a611175f47f473b881c 04 Mar 2026 none MIT — Details →
3.1.2-alpha-20260304134040-e3166aa73bfeefa44121343e7e7d9443b411505a 04 Mar 2026 none MIT — Details →
3.1.2-alpha-20260303220313-c7149f3418a5681988b332a57894f4298df672c8 03 Mar 2026 none MIT — Details →
3.1.2-alpha-20260303101919-77721a3fefea10a086458ac65d70a695cd4f6872 03 Mar 2026 none MIT — Details →
3.1.2-alpha-20260302005316-8c7827fbfc4ff33034c7ca7589f0afae971e1faa 02 Mar 2026 none MIT — Details →
3.1.2-alpha-20260301215738-b92758c840fc9c9ab6d111c4be1047b3629d3997 01 Mar 2026 none MIT — Details →
3.1.2-alpha-20260228130939-2f06eb24b0e28e5faac244736f99b00a52d9651c 28 Feb 2026 none MIT — Details →
3.1.2-alpha-20260228050751-bb59a7b205782896b723a9d3238449b483d666e7 28 Feb 2026 none MIT — Details →
3.1.2-alpha-20260227015110-9b0f481a2ef85218ee4021fe4f6fa8a65a5f2d9f 27 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226222021-a9d4fc2b40ba8b9234fe5d1692971c320a93c944 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226221449-4cf0bcdcbc96e7229c9e675568412921b140e0b5 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226220036-a0fbd82b34fc1eafb26574060fce667d0cbf0e50 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215927-4a17c9b3eb1e531a912a96f5f1f984fa89d82c35 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215403-9e3d78d84529ad12e553ba691930a3d79da6ccd6 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215327-61d6f2e136e501f77aecb933994efbee6649e7b4 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215258-ac9c9add26db068a7c936083627a250435c9b20d 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215147-efe877d744ab06a1474ee5129c673fbb517aaf4b 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226215025-51329071d1b2733a53898cced04cb8dc3b5bb6b1 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226214800-883e3b99b1a1a6b777662eb2040c517bfb70da37 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226181432-221349259a3f325f7e7190f6f772345f0086a1a4 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260226045833-99e114bb4f76505ea34837c7c9b733ccc3e8f804 26 Feb 2026 none MIT — Details →
3.1.2-alpha-20260224180226-22175e7048f00318869679f1dba28250304858b7 24 Feb 2026 none MIT — Details →
3.1.2-alpha-20260224105834-62785ed23965f823d52d9e912fff8fa9e9b22c9e 24 Feb 2026 none MIT — Details →
3.1.2-alpha-20260223220418-f79da363eced8959f4f3617ebe962cdb71dd5d24 23 Feb 2026 none MIT — Details →
3.1.2-alpha-20260223220400-1c0e1e883dfc3300aa6ce1bf71575093f13a1cfa 23 Feb 2026 none MIT — Details →
3.1.2-alpha-20260223164857-129c9a0745deabaf673c72d42631d82f654a974b 23 Feb 2026 none MIT — Details →
3.1.2-alpha-20260222180327-40c92893f9a51847b491d4358e13fb28f60dfe82 22 Feb 2026 none MIT — Details →
3.1.2-alpha-20260220173209-8dd1bb69961513cf14f6e99f9af631b61cdb20be 20 Feb 2026 none MIT — Details →
3.1.2-alpha-20260220173142-b8be23a1cbdbed043e1255a479c07fe0570bb9df 20 Feb 2026 none MIT — Details →
3.1.2-alpha-20260220135415-69c03e9019952ddced192bf047663d2358fced81 20 Feb 2026 none MIT — Details →
3.1.2-alpha-20260219221212-d9ab795b633ff733495d1881d89727a7844334b8 19 Feb 2026 none MIT — Details →
3.1.2-alpha-20260219221206-974d256bc7116d1dc8967d1a9cbc2178b9fdb398 19 Feb 2026 none MIT — Details →
3.1.2-alpha-20260219175432-9deaac781de17423fe7c356f6b21506c3694d92c 19 Feb 2026 none MIT — Details →
3.1.2-alpha-20260218093003-0138160e6ff33e93ab2b5fc7c942e66baa8fb293 18 Feb 2026 none MIT — Details →
3.1.2-alpha-20260217184219-3b176bc797512724761597f38581f02c24c65601 17 Feb 2026 none MIT — Details →
3.1.2-alpha-20260217184120-e80cd7e68568fcac00012b5e27140c3d9b9c64f4 17 Feb 2026 none MIT — Details →
3.1.2-alpha-20260217140249-58495087fe9b91a207e5388be362061d0c78a128 17 Feb 2026 none MIT — Details →
3.1.2-alpha-20260216181700-972486a7b83d95f54bcdf7b85044327296b2fb85 16 Feb 2026 none MIT — Details →
3.1.2-alpha-20260216013852-a074d87e75fcf0c5d5ecd438c84ea0889179a558 16 Feb 2026 none MIT — Details →
3.1.2-alpha-20260215095759-f5985002fa1f96b96b0cb34455623120590894ca 15 Feb 2026 none MIT — Details →
3.1.2-alpha-20260214140933-15d033c8ab5fc78960088649f2de49384604611a 14 Feb 2026 none MIT — Details →
3.1.2-alpha-20260214140830-1eec1b2a9f982197806ad89822f14593e1ad5e21 14 Feb 2026 none MIT — Details →
3.1.2-alpha-20260214140404-d6829c8fc73061cdb31ad58d5cf4366026b2a569 14 Feb 2026 none MIT — Details →
3.1.2-alpha-20260214135554-af377c179a861469926ce3a658378f53819d96b7 14 Feb 2026 none MIT — Details →
3.1.2-alpha-20260214135536-b30c4862d220f4801a82b4fe4ac6b4bae524a778 14 Feb 2026 none MIT — Details →
3.1.2-alpha-20260213130709-db02c2c2b6eb182c0371f001ac5f40a6b2fe8df5 13 Feb 2026 none MIT — Details →
3.1.2-alpha-20260212140555-96007d10b35aabc531b35862ebece3b602d271aa 12 Feb 2026 none MIT — Details →
3.1.2-alpha-20260212105351-78f435dc0d90d46d33ddb91c5e418119d69ef3e9 12 Feb 2026 none MIT — Details →
3.1.2-alpha-20260212105241-386b132469af89bc2962afc10bc737926cc2d2c5 12 Feb 2026 none MIT — Details →
3.1.2-alpha-20260212020227-87f4d9eef33fa657b5998b5af3cc757db4850269 12 Feb 2026 none MIT — Details →
3.1.2-alpha-20260211163030-74e90f50500dca44b5bbc06b816a1ae3bdd74e16 11 Feb 2026 none MIT — Details →
3.1.2-alpha-20260211134910-96903f245891a30cee5b1aee550b9f39d4a5f416 11 Feb 2026 none MIT — Details →
3.1.2-alpha-20260210150001-c74f71c84e10f73943db0eb5e57195f21046c610 10 Feb 2026 none MIT — Details →
3.1.2-alpha-20260210103055-5cebfc0d462892f6151081fa3b0035c5edd9eb98 10 Feb 2026 none MIT — Details →
3.1.2-alpha-20260209174855-8cd10bd499baceb05ffaff5a576d11b1ade78ba4 09 Feb 2026 none MIT — Details →
3.1.2-alpha-20260208015235-4016248ffdd01ec402b384349caa1a0bf0c4750f 08 Feb 2026 none MIT — Details →
3.1.2-alpha-20260207015845-cf0d32630c77a4868923c7f105d19fc28dec06a2 07 Feb 2026 none MIT — Details →
3.1.2-alpha-20260206170808-5210b64f5f673bec2bd3e062d808512b5206ff3c 06 Feb 2026 none MIT — Details →
3.1.2-alpha-20260205224456-8da42e276f85b819f63fc015c6c033190921ef29 05 Feb 2026 none MIT — Details →
3.1.2-alpha-20260205180539-4ec31ae1cc4d0a090137a45013a4653d82905430 05 Feb 2026 none MIT — Details →
3.1.2-alpha-20260205133620-e4f774e67bcf147ca8270be97d5dcc0f5866b1c3 05 Feb 2026 none MIT — Details →
3.1.2-alpha-20260204170743-87f7cdbdceed401f5d0c8cd4ea720600900bca4a 04 Feb 2026 none MIT — Details →
3.1.2-alpha-20260204123715-0d03fba53ccf29ca44c2a740ed2cb43488f93856 04 Feb 2026 none MIT — Details →
3.1.2-alpha-20260203170105-32fda5c3be0aae67e33b050bccdea094aab5251e 03 Feb 2026 none MIT — Details →
3.1.2-alpha-20260203130049-071811a9f73de68a56865d4c82c32901558f60b4 03 Feb 2026 none — — Details →
3.1.2-alpha-20260203100233-5b18241df25578ea8a08fa672428af52e6741a92 03 Feb 2026 none — — Details →
3.1.2-alpha-20260202135508-365945473fad563d1e0c41f279eb26d777b9dd32 02 Feb 2026 none — — Details →
3.1.2-alpha-20260130100040-074d614127e089e3b5e822e071c509d108e94a34 30 Jan 2026 none — — Details →
3.1.2-alpha-20260129184235-50b459cae242f4080180d2ccfbd67e25dd2bc368 29 Jan 2026 none — — Details →
3.1.2-alpha-20260129144026-5451043bb9773cf4e4ec5a94d3b929f9bf395996 29 Jan 2026 none — — Details →
3.1.2-alpha-20260129144004-c3ddc428f35582d1817f7c23d1b68bb0086f1aa4 29 Jan 2026 none — — Details →
3.1.2-alpha-20260128015838-47a0401824a63b0acd602af8bb94bd1573ffa24b 28 Jan 2026 none — — Details →
3.1.2-alpha-20260127211750-ae231ab1c35c9494894b9196fbadf2f6bdefa1ec 27 Jan 2026 none — — Details →
3.1.2-alpha-20260127150636-0425f819df25a46221b71c1983596a6a7822db8c 27 Jan 2026 none — — Details →
3.1.2-alpha-20260127145435-1e7fc0ac07c0b851520210dc9206c36c78150feb 27 Jan 2026 none — — Details →
3.1.2-alpha-20260127085718-60d72487ced71b72bc934f0bfd6a11103c038268 27 Jan 2026 none — — Details →
3.1.2-alpha-20260126222747-41d0ca3280c388f3ae2c0d46d774914be3558279 26 Jan 2026 none — — Details →
3.1.2-alpha-20260126020154-29c71bbcde691247f27d998ba3a78e6b716fa8f7 26 Jan 2026 none — — Details →
3.1.2-alpha-20260123201514-03f735d6632cbefcbb0927aa9889aee838b997c1 23 Jan 2026 none — — Details →
3.1.2-alpha-20260123133122-df0889518349e079e945d0d887c22cd1b20f8036 23 Jan 2026 none — — Details →
3.1.2-alpha-20260122090635-22ad1f706fc608df77cf195b7e82198e0719df69 22 Jan 2026 none — — Details →
3.1.2-alpha-20260121212511-f1db17ab4dac6eb39bf8c39d6b0d275accbf57ef 21 Jan 2026 none — — Details →
3.1.2-alpha-20260121054302-abba15c019386673c7c446d92f4f46a6a62347ef 21 Jan 2026 none — — Details →
3.1.2-alpha-20260121030237-31e8f46a5deb6728ca48bea877f008050c968960 21 Jan 2026 none — — Details →

The newest 120 of 1,212 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2026 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 1 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for graphql-modules

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
Race Condition Vulnerability in GraphQL Modules: High Risk for Context Injection 8.7 high 2.4.1 16 Jan 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About graphql-modules

Is graphql-modules safe to use?

Vulert records 1 vulnerabilities for graphql-modules in npm: 0 critical, 1 high, 0 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is graphql-modules's Vulert package health score?

Vulert scores graphql-modules 75/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of graphql-modules affected?

No. 3.1.2, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of graphql-modules should I use?

3.1.2 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does graphql-modules have?

1 vulnerability is recorded for graphql-modules in the npm ecosystem: 0 critical, 1 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new graphql-modules vulnerabilities disclosed?

1 vulnerability was recorded for graphql-modules in the last 12 months, and the oldest entry in this database dates to 16 Jan 2026. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of graphql-modules are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor graphql-modules for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the graphql-modules version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.