漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
XSS in @apollo/experimental-nextjs-app-support
Vulnerability Description
apollo-client-nextjs is the Apollo Client support for the Next.js App Router. The @apollo/experimental-apollo-client-nextjs NPM package is vulnerable to a cross-site scripting vulnerability. To exploit this vulnerability, an attacker would need to either inject malicious input (e.g. by redirecting a user to a specifically-crafted link) or arrange to have malicious input be returned by a GraphQL server (e.g. by persisting it in a database). To fix this issue, please update to version 0.7.0 or later.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Vulnerability Type
Web页面中脚本相关HTML标签转义处理不恰当(基本跨站脚本)
Vulnerability Title
Apollo 跨站脚本漏洞
Vulnerability Description
Apollo是Alex Breen个人开发者的一组 PHP 脚本。旨在为学生上传课程作业提供基于 Web 的界面。 Apollo apollo-client-nextjs 0.7.0之前版本存在跨站脚本漏洞，该漏洞源于apollo/experimental-apollo-client-nextjs 执行服务器端 HTML 页面渲染时对不受信任输入的处理不当，导致跨站脚本。
CVSS Information
N/A
Vulnerability Type
N/A