Bump graphql-core version to fix concurrency / security issues #70
Comments
2 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
{{ message }}
Hi,
graphql-core2.3.0 contains a fix for the concurrency issues that have been reported inflask-graphql(e.g. #43). Given Flask rely heavily on thread-scoped global variables, I would recommend you bump the minimum version forgraphql-coreinsetup.pyto completely prevent these security errors from happening.See https://github.com/graphql-python/graphql-core/pull/260#issue-356659503 for more context.
Cheers,
J
The text was updated successfully, but these errors were encountered: