{
  "affected": [
    {
      "package": {
        "ecosystem": "npm",
        "name": "type-graphql"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.17.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-209"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2020-08-31T18:59:32Z",
    "nvd_published_at": null,
    "severity": "LOW"
  },
  "details": "Versions of `type-graphql` prior to 0.17.6 are vulnerable to Information Exposure. The package leaks the resolver source code in an error message. It is possible to force this error when no subscription topics are provided in the request.\n\n\n## Recommendation\n\nUpgrade to version 0.17.6 or later.",
  "id": "GHSA-xf64-2f9p-6pqq",
  "modified": "2020-08-31T18:59:32Z",
  "published": "2020-09-04T17:24:08Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/MichalLytek/type-graphql/issues/489"
    },
    {
      "type": "WEB",
      "url": "https://www.npmjs.com/advisories/1444"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [],
  "summary": "Information Exposure in type-graphql"
}