{"schema_version":"1.6.0","id":"ROOT-APP-NPM-GHSA-9q82-xgwf-vj6h","modified":"2026-06-08T16:26:08Z","published":"2026-06-08T16:26:08Z","upstream":["GHSA-9q82-xgwf-vj6h"],"summary":"GHSA-9q82-xgwf-vj6h in @rootio/apollo__server - Patched by Root","details":"Root has patched GHSA-9q82-xgwf-vj6h in the @rootio/apollo__server package for Root:npm. Multiple fixed versions available.","affected":[{"package":{"name":"@rootio/apollo__server","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-root.io.1"},{"fixed":"4.13.0-root.io.2"},{"fixed":"5.0.0-root.io.6"}]}],"database_specific":{"all_fixed_versions":["4.13.0-root.io.1","4.13.0-root.io.2","5.0.0-root.io.6"],"root_patch_version":"","root_patched":true,"total_fixed_versions":3,"upstream_version":"5.0.0-root.io.6"}},{"package":{"name":"@rootio/apollo-server-core","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-root.io.1"},{"fixed":"3.13.0-root.io.2"}]}],"database_specific":{"all_fixed_versions":["3.13.0-root.io.1","3.13.0-root.io.2"],"root_patch_version":"","root_patched":true,"total_fixed_versions":2,"upstream_version":"3.13.0-root.io.2"}},{"package":{"name":"@apollo/server","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.0-aikido.2"},{"fixed":"5.0.0-aikido.6"}]}],"database_specific":{"all_fixed_versions":["4.13.0-aikido.2","5.0.0-aikido.6"],"root_patch_version":"","root_patched":true,"total_fixed_versions":2,"upstream_version":"5.0.0-aikido.6"}},{"package":{"name":"apollo-server-core","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.13.0-aikido.2"}]}],"database_specific":{"all_fixed_versions":["3.13.0-aikido.2"],"root_patch_version":"","root_patched":true,"total_fixed_versions":1,"upstream_version":"3.13.0-aikido.2"}}],"database_specific":{"distro":"npm","distro_version":"","severity":"MEDIUM","source":"Root"}}