Vulnerability Database · npm · Package report
@graphql-tools/graphql-file-loader: vulnerability history, versions and safety
@graphql-tools/graphql-file-loader is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on @graphql-tools/graphql-file-loader 9.0.6 i
Updated on 23 Oct 2026
Good news: 9.0.6, the version you would install today, has no known vulnerabilities.
- Security Minor issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Moderate
What to do: Stay on 9.0.6 or newer. This can change: a vulnerability disclosed tomorrow can affect 9.0.6 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 9.0.6 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 5,431 i
- OpenSSF scorecard 4/10 i
- Last release this month i
- Licence MIT i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for @graphql-tools/graphql-file-loader, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 9.0.7-alpha-20261023035502-55d298038e6dcfcdc73d4778f37e1c57f2fdd45d 23 Oct 2026
- 9.0.7-alpha-20261023035309-fcbd593c8b2c70e01a8fc204734b04ecccae3999 23 Oct 2026
- 9.0.7-alpha-20261023035032-6bdfd8bbaa0c4e5b8791f02008837af772d78f2a 23 Oct 2026
- 9.0.7-alpha-20261023034812-a46992110694307f4b5b9692a9b4d138bb9a3752 23 Oct 2026
- 9.0.7-alpha-20261023034635-ea9401f14f0b112346c6acbf8ab8d1cec363a5e3 23 Oct 2026
- 9.0.7-alpha-20261023034307-08ab7a5acf3039b3030db0bca83b13ca5cdb6f14 23 Oct 2026
- 9.0.7-alpha-20261023033333-a8818582069915238dd60c8738085e4b231dd5b5 23 Oct 2026
- 9.0.7-alpha-20261023032749-8819a8cdec4bc0df4651250583f34e1da5e31738 23 Oct 2026
- 9.0.6 22 Oct 2026
- 9.0.6-alpha-20261022161331-0ccc3505cdb391af91b73fdefd9bc754b2446214 22 Oct 2026
- 9.0.6-alpha-20261022160239-7213f5b31a8d29d40501b803bd4952d6e81139bd 22 Oct 2026
- 9.0.6-alpha-20261022154620-3820e6d034c70926dadef50e9b5887bd2bc9be32 22 Oct 2026
- 9.0.6-alpha-20261022153016-8223756120481ac0159c41ad7eb5c704e9b21d20 22 Oct 2026
- 9.0.6-alpha-20261022151559-08686714a3f722ce74c5b931949cb5e32cf18e69 22 Oct 2026
- 9.0.6-alpha-20261022150552-37b7fb522bfd5503cf6ed17534f85eab1f2601ae 22 Oct 2026
- 9.0.6-alpha-20261022150216-d49a65105efad3dda003fe01290c65b32ff679e5 22 Oct 2026
- 9.0.6-alpha-20261022142622-fbb7026d75d092d5b129d7d0a8dcbbe6c0b54f93 22 Oct 2026
- 9.0.6-alpha-20261022140714-a514d141efb7db11d555cc3c5ad18c3d1bba539f 22 Oct 2026
- 9.0.6-alpha-20261022141031-91c83c5bb61dab256d9a12a1300ffec2d191bf8c 22 Oct 2026
- 9.0.6-alpha-20261022140540-3704d277c1efd329b9b8636e28ca4f8240d825da 22 Oct 2026
- 9.0.6-alpha-20261022140043-399fc2d11384e346cdd63b9dbdad8ba2c83054fc 22 Oct 2026
- 9.0.6-alpha-20261022135503-8d55700d2189976c47709ae310e7a93c48fb336b 22 Oct 2026
- 9.0.6-alpha-20261022135312-6f7261c885ae270cd82e1bdbf39099774bb70e42 22 Oct 2026
- 9.0.6-alpha-20261022134929-fcdf7790e25bf34e6d7c080ca82ea7e09a1e1225 22 Oct 2026
- 9.0.5-alpha-20261022112046-2a1d6e720c9620bbdd1b59723254c9a9a34057bc 22 Oct 2026
- 9.0.5-alpha-20261022112259-8ea91b5c906c81dcb5ca4bb34f08157cf8eaba9b 22 Oct 2026
- 9.0.5 22 Oct 2026
- 9.0.5-rc-20261022111714-676b1df2e70279f406beea4c1ffc473e1bce2177 22 Oct 2026
- 9.0.5-alpha-20261021144100-47631ff1487f2285e227b84c072ae84f30a23adb 21 Oct 2026
- 9.0.5-alpha-20261021142241-5f7ed6631dc34bbfaf734b2d1e50982f4a62e73b 21 Oct 2026
- 9.0.5-alpha-20261021141955-a293ecf70e7c9f2b8d4b9bebaa203ca6c58b7f49 21 Oct 2026
- 9.0.5-alpha-20261021141728-736a4ae7b3c1169c62e2db9f2ed4ed77979bf08c 21 Oct 2026
- 9.0.4 20 Oct 2026
- 9.0.4-rc-20261020151036-747d284a4a47c0c02af2bea075268c2289f8b758 20 Oct 2026
- 9.0.4-alpha-20261020145849-20902ff7ec3c65eafe707be10e42b5346dd166ea 20 Oct 2026
- 9.0.4-alpha-20261020145425-218968199939b10f1ca9458c5ecf1024b7600ace 20 Oct 2026
- 9.0.4-alpha-20261020145640-df200f6f51e88edd06580abbfe97ddf13c457fdd 20 Oct 2026
- 9.0.4-alpha-20261020145141-5d888f11bdbd1a5cf81f867c98be331ea5dda527 20 Oct 2026
- 9.0.3 20 Oct 2026
- 9.0.2-alpha-20261020141638-679c53effb1d84578dfdb8cd2fbcd0c4c93d970e 20 Oct 2026
- 9.0.2-alpha-20261020141228-0b45c008c3eb39b6b634293732537f794bfeef17 20 Oct 2026
- 9.0.2-alpha-20261020140849-f7e5a30e007407cc310c6a4078176c49831b90b5 20 Oct 2026
- 9.0.2 19 Oct 2026
- 9.0.1-alpha-20261019174411-2721b4ef3fa91039752c353b6827f98d0e7bb011 19 Oct 2026
- 9.0.1-alpha-20261019174158-8ac7bf6549b1cf4b9fc6834285586705c269c47f 19 Oct 2026
- 9.0.1 19 Oct 2026
- 9.0.1-rc-20261019170540-d3207f83edd1af7cc18b1d0de87e76ca21a22a09 19 Oct 2026
- 9.0.1-rc-20261019170803-add3b34f4e88e57240f6192c9524544f9254613f 19 Oct 2026
- 9.0.1-alpha-20261019170158-4f56910b5e58e3911a3b63cdaa86fbbf80c26cff 19 Oct 2026
- 9.0.1-alpha-20261019165808-aa414154104f0ba58c06e0f64fdab7429a9a5303 19 Oct 2026
- 9.0.1-alpha-20261019165722-e6efc1d26103633c70a90fe4c88d2b5e701525a2 19 Oct 2026
- 9.0.1-alpha-20261019165600-ad37ff70135b08e4e529bb9774dbafc92c0afafd 19 Oct 2026
- 9.0.1-alpha-20261019165313-ce89507f1f0bf61cbfbf6dbd63cc428e18d474c9 19 Oct 2026
- 9.0.1-alpha-20261019164611-538e7787be9cdbcfc800aa118defd976f702b538 19 Oct 2026
- 9.0.0-rc-20261019143444-08495dac9c78ba1d624dc02ca6dcaeca82aaf318 19 Oct 2026
- 9.0.0 19 Oct 2026
- 9.0.0-alpha-20261019142930-3ab3ca203e89678c45cece760eab3cefb7bb23fc 19 Oct 2026
- 9.0.0-alpha-20261019143118-7be5ebb61649aab8d773143666a8b71acf0aab42 19 Oct 2026
- 9.0.0-alpha-20261019142605-31a7d24a74197583275edd80d719303efbab526c 19 Oct 2026
- 9.0.0-alpha-20261019142107-6fe6d688eee4ecefb44cb34f332037ccd6460b29 19 Oct 2026
- 9.0.0-alpha-20261019141549-ff80c5f2e15200356b0aa18db148f5cb87df43a2 19 Oct 2026
- 9.0.0-alpha-20261019140549-83ff9b0d91ccc5771770665e9a5f83332f82fc27 19 Oct 2026
- 9.0.0-alpha-20261019132510-84a464bc30031a63612acebe95c678a0ea62d7a0 19 Oct 2026
- 9.0.0-alpha-20261019132215-251cf5c8bcdccd2a02d3f221afdef52d109a3ecb 19 Oct 2026
- 9.0.0-alpha-20261019132350-c3868a7780411bb0ade96eae9d7f0ff2f9c966b9 19 Oct 2026
- 9.0.0-alpha-20261019132402-30fc0b7853ca366ec00b25af2a46124fb5b821d9 19 Oct 2026
- 9.0.0-alpha-20261019132215-d30f3aa15d60aae255d10b9bc6bc788fcee00b8b 19 Oct 2026
- 9.0.0-alpha-20261019132037-2dcfc01711b2a1eabb5e86babdd857bee5a15e2f 19 Oct 2026
- 9.0.0-alpha-20261019132106-3740a8824447f2af018fcc915c2f811e833d846b 19 Oct 2026
- 9.0.0-alpha-20261017153408-5c280da98a0fd8acd4c58da44213fdb0fbc3d7d6 17 Oct 2026
- 9.0.0-alpha-20261017152910-a1160dd9f64eff0e9abf9b66ce651c1d3717f685 17 Oct 2026
- 9.0.0-alpha-20261017151025-e528c7e870bacb53796ac7d2691c0896c632cffb 17 Oct 2026
- 9.0.0-alpha-20261016110610-2cf008e0d40094a9a735a16a849dfb60589da957 16 Oct 2026
- 9.0.0-alpha-20261015220015-2b402d9ad6308ef8eee2c46d885ed0b3f5cf05ff 15 Oct 2026
- 9.0.0-alpha-20261015215157-a21f8cbf8d73f80c4c97abb44b097a74a6977287 15 Oct 2026
- 9.0.0-alpha-20261015185255-f2057a0e2a0bf449d59e2b61db74f4a0e83e9181 15 Oct 2026
- 9.0.0-alpha-20261015175058-9ecfc251488d852a7bcb1dc5a5d37e83700c57b9 15 Oct 2026
- 9.0.0-alpha-20261015164831-3b172fbf53a58da52a4b15c8b8576ff6f5ca0f97 15 Oct 2026
- 9.0.0-alpha-20261015162601-f86bde78972a59254d9b99f7a8fbf10a7466ddb7 15 Oct 2026
- 9.0.0-alpha-20261015161426-4fe867d57cda1b730cfe517957106c5af9c0307f 15 Oct 2026
- 9.0.0-alpha-20261015161145-50dfded556dbaeb84995501b7993869b764c1fe7 15 Oct 2026
- 9.0.0-alpha-20261015160958-68fe6fdf8d857b238f40fbf8008c052aac130fb6 15 Oct 2026
- 9.0.0-alpha-20261015155046-d7c89c4fdf1f73dcedcb0a0bea91d3b62e80193f 15 Oct 2026
- 9.0.0-alpha-20261015153440-51428b9a35d7b6059a68e83dd12de91f0c1cba5e 15 Oct 2026
- 8.1.24 15 Oct 2026
- 8.1.24-rc-20261015131120-fa97ce503c5733b9c54c9bf11d9ecfe4138ed20c 15 Oct 2026
- 8.1.24-alpha-20261015130915-916dd91b21012b0b76097fea698178038cf88047 15 Oct 2026
- 8.1.24-alpha-20261015125059-94858f8ca46477dd359666d879cf6dea1e3c4e68 15 Oct 2026
- 8.1.24-alpha-20261015123110-f35fb24c2020f3608e12004cbe07375e3cdcce02 15 Oct 2026
- 8.1.24-alpha-20261015121728-a889a3a505227bcb95b3859a6621084522332686 15 Oct 2026
- 8.1.24-alpha-20261015120504-12ef6e15bdf398bfc67c5b483b142ebe17df676b 15 Oct 2026
- 8.1.24-alpha-20261015115653-8859b08713091dbed7e7f72201b14c991d3fe4b4 15 Oct 2026
- 8.1.24-alpha-20261015115322-da8ab0313af1fc687fe27e11377fb33759431f6f 15 Oct 2026
- 8.1.24-alpha-20261015113541-c8da89ad5a264659c870cb3ef894501fe5b30705 15 Oct 2026
- 8.1.23-alpha-20261015113511-9a01fb5da2863f3accab89004ca9fea2d754b8ac 15 Oct 2026
- 8.1.23-alpha-20261015112416-a00b7382039a493dd54c396b228f4bddfc63ce0f 15 Oct 2026
- 8.1.24-alpha-20261015112432-7416a243efcc18c955e70c48b6aaf529eee1e555 15 Oct 2026
- 8.1.24-alpha-20261015112048-d288fc5c7bf2b3463282a3ecbc8c448d6f274fe5 15 Oct 2026
- 8.1.24-alpha-20261015111704-0a6dbc407a8f68de12c48b6b770598d43a8641c1 15 Oct 2026
- 8.1.24-alpha-20261015111432-738406381e13628fc2d29c3573e0bc3430f47e86 15 Oct 2026
- 8.1.24-alpha-20261015110519-dc73e86563917132c2b24129d12cae1e24003c7e 15 Oct 2026
- 8.1.23-alpha-20261015110443-8e2c4e6197462e9a4e62cb5b52e5c7d767ec895f 15 Oct 2026
- 8.1.24-alpha-20261015105813-7dcc5f2faa696fbd8916d6d8fd0aab29b23fd026 15 Oct 2026
- 8.1.24-alpha-20261015105344-2b8fd0dd346ab3ef2b57a5770a98bc4494340cc2 15 Oct 2026
- 8.1.24-alpha-20261015104330-cfe35733f8b9dd4cc717693fe6eb133932dd86f2 15 Oct 2026
- 8.1.24-alpha-20261015102510-4f2893fe28e5054181f8580d6de89e78ec2d1ab1 15 Oct 2026
- 8.1.24-alpha-20261015102120-98b4ac064ad30608549882d0ea39e9767a7ffe47 15 Oct 2026
- 8.1.24-alpha-20261015093445-21fd7e797a8d53116a5d5116614a1626b7005672 15 Oct 2026
- 8.1.24-alpha-20261015092807-a021b97f118ca519e176ca16da05244a1fcb1d9e 15 Oct 2026
- 8.1.24-alpha-20261015084620-a021b97f118ca519e176ca16da05244a1fcb1d9e 15 Oct 2026
- 8.1.24-alpha-20261015070549-9c2fe41d763c1603a887baee50605fff92d91969 15 Oct 2026
- 8.1.23 12 Oct 2026
- 8.1.23-alpha-20261012125558-33625d2bc71b573c8b63d48f8a3868d616c1f343 12 Oct 2026
- 8.1.23-alpha-20261012124749-c550474c90d51ae956296d0a54ffa999a6029a31 12 Oct 2026
- 8.1.23-alpha-20261001172002-43a3bfc038b85ab2a63e666c2974f904fbe6fd5f 01 Oct 2026
- 8.1.22 30 Sep 2026
- 8.1.22-alpha-20260930220303-8c8dbc8336baefee6d3a6f66cc117afc1f5b717b 30 Sep 2026
- 8.1.22-alpha-20260930215632-5cb842eb6a4dae701e10ec6e3fc7631675cca52f 30 Sep 2026
- 8.1.21 30 Sep 2026
- 8.1.21-alpha-20260930213106-001ad6da4923b8bb612d81d5418e51f7365e603b 30 Sep 2026
The newest 120 of 2,170 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
03 Vulnerabilities
Recorded vulnerabilities for @graphql-tools/graphql-file-loader
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About @graphql-tools/graphql-file-loader
Is @graphql-tools/graphql-file-loader safe to use?
Vulert has no vulnerabilities on record for @graphql-tools/graphql-file-loader in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is @graphql-tools/graphql-file-loader's Vulert package health score?
Vulert scores @graphql-tools/graphql-file-loader 86/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of @graphql-tools/graphql-file-loader affected?
No. 9.0.6, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does @graphql-tools/graphql-file-loader have?
0 vulnerabilities are recorded for @graphql-tools/graphql-file-loader in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new @graphql-tools/graphql-file-loader vulnerabilities disclosed?
0 vulnerabilities were recorded for @graphql-tools/graphql-file-loader in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of @graphql-tools/graphql-file-loader are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor @graphql-tools/graphql-file-loader for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @graphql-tools/graphql-file-loader version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.