Vulnerability Database · npm · Package report

graphql-ws: vulnerability history, versions and safety

graphql-ws is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.

i
0 vulnerabilities recorded

Nothing recorded for this package in the npm ecosystem.

i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

Vulert verdict on graphql-ws 6.4.1 i

Updated on 23 Oct 2026

Good news: 6.4.1, the version you would install today, has no known vulnerabilities.

Package health score 84/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Stay on 6.4.1 or newer. This can change: a vulnerability disclosed tomorrow can affect 6.4.1 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 6.4.1 — unaffected i
  • Vulnerabilities on record 0 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Depended on by 1,352 packages i
  • Stars 1,871 i
  • OpenSSF scorecard 4/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for graphql-ws, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
6.4.1 15 Oct 2026 none MIT — Details →
6.4.0 13 Oct 2026 none MIT — Details →
6.3.0 24 Sep 2026 none MIT — Details →
6.2.2 16 Sep 2026 none MIT — Details →
6.2.2-rc-b0ff8c3b2a686031889b706c261b49c9f503018b 11 Sep 2026 none MIT — Details →
6.2.1 06 Aug 2026 none MIT — Details →
6.2.0 24 Jul 2026 none MIT — Details →
6.1.1 22 Jul 2026 none MIT — Details →
6.1.1-rc-f25180b43ed97409d1aa503002825badb1fcfd10 22 Jul 2026 none MIT — Details →
6.1.0 10 Jul 2026 none MIT — Details →
6.1.0-rc-bd989b95f7215b9ec3f13ae4de52f6881d4b3e7a 10 Jul 2026 none MIT — Details →
6.0.8 26 Mar 2026 none MIT — Details →
6.0.8-rc-a48f896493e12d0d98221ee57bfda0b1bd4eb1e3 26 Mar 2026 none MIT — Details →
6.0.8-alpha-7b80b2e5ad1f8317349be5b7d79e94f62ea864dc 26 Mar 2026 none MIT — Details →
6.0.7 27 Jan 2026 none MIT — Details →
6.0.7-rc-bb6f056fa4354d42d626530cdff7b4347cec8246 27 Jan 2026 none MIT — Details →
6.0.7-alpha-02082131128b9c198b36c3d1ff9bd695ad4ca023 26 Jan 2026 none MIT — Details →
6.0.7-alpha-543e5663d1ad697f98715ad8c50a5752b43446f6 26 Jan 2026 none MIT — Details →
6.0.7-alpha-1bf236f6e1251edce903df863476ccf3e730113a 26 Jan 2026 none MIT — Details →
6.0.6 14 Jul 2025 none MIT — Details →
6.0.6-rc-3dc9f117095dba6b853ebf955361a89cd47ccba3 14 Jul 2025 none MIT — Details →
6.0.6-alpha-41369370839f6649c5bd9cbff7f8291812df0cd8 14 Jul 2025 none MIT — Details →
6.0.5 13 May 2025 none MIT — Details →
6.0.5-rc-49cdbd1a128eb3321e5fad963e333837234d459c 13 May 2025 none MIT — Details →
6.0.4 14 Feb 2025 none MIT — Details →
6.0.4-rc-75402f5580c440114a8b5411786fc8ab85c435c9 14 Feb 2025 none MIT — Details →
6.0.3 30 Jan 2025 none MIT — Details →
6.0.3-rc-f61306b17d18a106f729e49fccbca98402962f54 30 Jan 2025 none MIT — Details →
6.0.2 21 Jan 2025 none MIT — Details →
6.0.2-rc-7fcecaa0d642d198ad284c7df7da128143fa4059 21 Jan 2025 none MIT — Details →
6.0.1 16 Jan 2025 none MIT — Details →
6.0.1-rc-4265223f9cd2ecadbb0e49ec66c98591b517b264 16 Jan 2025 none MIT — Details →
6.0.1-alpha-799422c4d211c7bafb04a07bad58d4eecec9c2fb 16 Jan 2025 none MIT — Details →
6.0.0 15 Jan 2025 none MIT — Details →
6.0.0-rc-4a02d9dca34f384019c97e60274507fd15ca408f 15 Jan 2025 none MIT — Details →
6.0.0-alpha-68a86924da7a4cbfa4b7c0fef8c158a6a46f57d2 15 Jan 2025 none MIT — Details →
6.0.0-rc-26fe803af0ae1002cc422aeb1b7e6f6278c285da 15 Jan 2025 none MIT — Details →
6.0.0-rc-90b1a4bc4124dcbbbd0b3d78e64b6c8bfcea420a 15 Jan 2025 none MIT — Details →
6.0.0-alpha-96da2896f4856a43bcfb7d9b8cb611054f607ffb 15 Jan 2025 none MIT — Details →
6.0.0-rc-ec99df0ec7cecabe7b3a4f20784cb0e3c4af7495 15 Jan 2025 none MIT — Details →
6.0.0-rc-29b3d3eda13bb63eed31bd50f97df0dead12543a 15 Jan 2025 none MIT — Details →
6.0.0-alpha-f63676ccac7e068c9277be9540e27f0ada025be3 15 Jan 2025 none MIT — Details →
6.0.0-rc-987b8093a5c9ec7ef6f0e16ed49c4bfe1e15d027 15 Jan 2025 none MIT — Details →
6.0.0-rc-4a448a3519c05a5bbd06aa1a8df284be48060622 15 Jan 2025 none MIT — Details →
6.0.0-rc-62a544ff6110f3e963672220b9c4b49143043a45 14 Jan 2025 none MIT — Details →
6.0.0-rc-f4b5ad57aec27043510b9217fa4e57d2a0f9d310 14 Jan 2025 none MIT — Details →
6.0.0-rc-1a82d72a451e68b3e49edab1034c616b6bfce0a8 14 Jan 2025 none MIT — Details →
6.0.0-alpha-762205fc85dcd4025c050b9794d4b77a7ecea1c9 14 Jan 2025 none MIT — Details →
6.0.0-alpha-a784a01a50e9a027507446d321b8ea0cfbe8cf74 14 Jan 2025 none MIT — Details →
6.0.0-alpha-e7ed3a8ef286268a8a43446fedc86ce834efbb31 14 Jan 2025 none MIT — Details →
6.0.0-alpha-8ffe9b5ba1b4ccdac1321ab18e4da87cf21fc1ca 14 Jan 2025 none MIT — Details →
6.0.0-alpha-8d563aa98b8d45a0193229a581f0c056cfd5b77b 14 Jan 2025 none MIT — Details →
6.0.0-alpha-dd8d588b9f5050229ac321291a34019db7a7995f 14 Jan 2025 none MIT — Details →
6.0.0-alpha-68721ae2fd92e635f29413f1b2e9a6c7c67df1d8 14 Jan 2025 none MIT — Details →
6.0.0-alpha-f8ad9bd6f422d53b927298a62af54c444d605a6f 14 Jan 2025 none MIT — Details →
6.0.0-alpha-4f29ff9eab9433e3aad19feea287ff2920f36606 14 Jan 2025 none MIT — Details →
6.0.0-alpha-848715bb93370be156ebb71af2d3ca6c215a8eae 14 Jan 2025 none MIT — Details →
6.0.0-alpha-e61b1cb721f4a2976645ba1b72b5e97c8505db3a 14 Jan 2025 none MIT — Details →
6.0.0-alpha-990be3581272077a7637ef8e43bd97341daac09c 14 Jan 2025 none MIT — Details →
6.0.0-alpha-fc2b732baaf8b5a731a9c77ab927b2bc30c759cb 14 Jan 2025 none MIT — Details →
6.0.0-alpha-51e3405d3aca3d74716845f50a1718682cf05ea8 13 Jan 2025 none MIT — Details →
6.0.0-alpha-0aac34db5f28b7be5f3ec03b6cc90127f5fe265a 13 Jan 2025 none MIT — Details →
6.0.0-alpha-09ad5323ae6c5befa81f867955d25600b7449d4c 13 Jan 2025 none MIT — Details →
6.0.0-alpha-e5d8bd087ab70cbe7958c15f3fd44a29fb2f1e70 13 Jan 2025 none MIT — Details →
6.0.0-alpha-8b07cbf306f2d2834c5d5ffefd1ca161647d3f29 13 Jan 2025 none MIT — Details →
6.0.0-alpha-1cc7164b8562245a127d34ce69bf16e2e844d82b 10 Jan 2025 none MIT — Details →
6.0.0-alpha-b4535e4580a5376b6b360e8c65e3cee6cd67c86b 10 Jan 2025 none MIT — Details →
6.0.0-alpha-2f8a0db0dbf18c4bcf4572a2dfa5935024b27f8b 10 Jan 2025 none MIT — Details →
6.0.0-alpha-b234fd545e8b1193fe7717b3b059e0f61429494e 10 Jan 2025 none MIT — Details →
6.0.0-alpha-64fc3a398bce813d89a15ba7cbdcd4ce04e96f49 10 Jan 2025 none MIT — Details →
6.0.0-alpha-6da42d9e001323c89623839b674f34b166c5e31f 10 Jan 2025 none MIT — Details →
6.0.0-alpha-b40bc5e39ae192cf638469c2b20604ac807acd05 10 Jan 2025 none MIT — Details →
6.0.0-alpha-35f84572c0898433ae319cdc7c448107fe689d0c 10 Jan 2025 none MIT — Details →
6.0.0-alpha-83f7b9e8a300edebea45c3ec6d5272e766cf2829 10 Jan 2025 none MIT — Details →
6.0.0-alpha-a8af1e8e5e1745327897641d99a053ea77e760ff 10 Jan 2025 none MIT — Details →
6.0.0-alpha-eba47dc795c23daf04f97505477a610b51500db3 10 Jan 2025 none MIT — Details →
5.16.2 10 Jan 2025 none MIT — Details →
5.16.2-rc-9e16ec07d4edb9cad8c14d67ab094271e77d079d 10 Jan 2025 none MIT — Details →
5.16.2-alpha-722b4a254014b433f6c27021fb15a36c1552971d 10 Jan 2025 none MIT — Details →
5.16.1 08 Jan 2025 none MIT — Details →
5.16.1-rc-5a26ae37fef6d21c32ed032252074526113c5c71 08 Jan 2025 none MIT — Details →
5.16.1-rc-293badec26db8e39c3abfce6c49143167b93ad9b 08 Jan 2025 none MIT — Details →
5.16.1-rc-4403b501f1427842c92fae99bfd41725d2744288 08 Jan 2025 none MIT — Details →
5.16.1-alpha-103ff293fd6f223310e605efd6d3875fd82fd07c 08 Jan 2025 none MIT — Details →
5.16.0 27 Mar 2024 none MIT — Details →
5.15.0 12 Feb 2024 none MIT — Details →
5.14.3 20 Dec 2023 none MIT — Details →
5.14.2 23 Oct 2023 none MIT — Details →
5.14.1 28 Sep 2023 none MIT — Details →
5.14.0 22 Jun 2023 none MIT — Details →
5.13.1 15 May 2023 none MIT — Details →
5.13.0 12 May 2023 none MIT — Details →
5.12.1 31 Mar 2023 none MIT — Details →
5.12.0 06 Mar 2023 none MIT — Details →
5.11.3 01 Feb 2023 none MIT — Details →
5.11.2 21 Sep 2022 none MIT — Details →
5.11.1 16 Sep 2022 none MIT — Details →
5.11.0 16 Sep 2022 none MIT — Details →
5.10.2 12 Sep 2022 none MIT — Details →
5.10.1 19 Aug 2022 none MIT — Details →
5.10.0 09 Aug 2022 none — — Details →
5.9.1 01 Jul 2022 none — — Details →
5.9.0 09 Jun 2022 none — — Details →
5.8.2 12 May 2022 none — — Details →
5.8.1 25 Apr 2022 none — — Details →
5.8.0 25 Apr 2022 none — — Details →
5.7.0 07 Apr 2022 none — — Details →
5.6.4 24 Mar 2022 none — — Details →
5.6.3 13 Mar 2022 none — — Details →
5.6.2 23 Feb 2022 none — — Details →
5.6.1 21 Feb 2022 none — — Details →
5.6.0 19 Feb 2022 none — — Details →
5.5.5 29 Oct 2021 none — — Details →
5.5.4 27 Oct 2021 none — — Details →
5.5.3 20 Oct 2021 none — — Details →
5.5.2 20 Oct 2021 none — — Details →
5.5.1 19 Oct 2021 none — — Details →
5.5.0 08 Sep 2021 none — — Details →
5.4.1 26 Aug 2021 none — — Details →
5.4.0 21 Aug 2021 none — — Details →

The newest 120 of 187 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

No dated vulnerabilities are recorded for this package yet.

03 Vulnerabilities

Recorded vulnerabilities for graphql-ws

No vulnerability write-ups match this view

Search all 0 in the database →

No vulnerabilities match this view.

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About graphql-ws

Is graphql-ws safe to use?

Vulert has no vulnerabilities on record for graphql-ws in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.

What is graphql-ws's Vulert package health score?

Vulert scores graphql-ws 84/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of graphql-ws affected?

No. 6.4.1, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

How many vulnerabilities does graphql-ws have?

0 vulnerabilities are recorded for graphql-ws in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new graphql-ws vulnerabilities disclosed?

0 vulnerabilities were recorded for graphql-ws in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of graphql-ws are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor graphql-ws for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the graphql-ws version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.