Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
Miggo AIRoot Cause AnalysisThe vulnerability lies in the comment function within cli/src/render/common/comment.ts. This function is responsible for generating JSDoc comments from a GraphQL schema's descriptions and deprecation reasons. The patch 2dbc80ffb767ee58e6b27d9d81d58fa1ee8bea28 introduces a new function, escapeCommentClose, which escapes the */ character sequence. This sequence, if present in the schema's text, could be used to prematurely close a comment block and inject arbitrary code into the generated TypeScript file. The comment function was modified to use escapeCommentClose on both the comment.text and comment.deprecated inputs, which directly mitigates the vulnerability. Therefore, the comment function is the vulnerable function as it was the one processing the malicious input and allowing for code injection.
commentcli/src/render/common/comment.ts
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| @genql/cli | npm | < 6.3.4 | 6.3.4 |