@graphql-tools/executor-legacy-ws vulnerabilities (npm)

3 vulnerabilities.

• @graphql-tools/executor-legacy-ws npm GraphQL Tools: Shared legacy executor routes one subscription's results to a different caller CVE-2026-118666 Fix available 6.0 MediumOctober 28, 2026
• @graphql-tools/executor-legacy-ws npm GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authentications CVE-2026-118665 Fix available 8.2 HighOctober 28, 2026
• @graphql-tools/executor-legacy-ws npm GraphQL Tools: TLS Certificate Validation Disabled in Legacy GraphQL WebSocket Executor CVE-2026-103921 Fix available 7.4 HighOctober 1, 2026