Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

api-platform/graphql

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 high
Registry
Packagist

Advisories 2

  • GraphQL grant on a property might be cached with different objects

    Affected: from 4.0.0-alpha.1, fixed in 4.0.22; fixed in 3.4.17; from 4.1.0-alpha.1, fixed in 4.1.5.

  • GraphQL query operations security can be bypassed

    Affected: from 4.0.0-alpha.1, fixed in 4.0.22; fixed in 3.4.17; from 4.1.0-alpha.1, fixed in 4.1.5.