A vulnerability, identified as CVE-2026-103921, in the @graphql-tools/executor-legacy-ws package on the npm registry was patched by Root. The issue has been addressed in multiple fixed versions of the package.