Security
فارسی
All products

api-platform/core

Composer · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
api-platform/core's secured properties may be accessible within collectionsCVE-2023-25575 · GHSA-VR2X-7687-H6QVVersion ranges need review. api-platform/core Composer High Fix reported
API Platform Core: Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)CVE-2026-54164 · GHSA-9RJG-X2P2-H68H api-platform/core Composer Medium Fix reported
API Platform Core vulnerable to cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateCVE-2026-49858 · GHSA-PJHX-3C3W-9V23 api-platform/coreapi-platform/hal Composer Medium Fix reported
GraphQL grant on a property might be cached with different objectsCVE-2025-31485 · GHSA-428Q-Q3VV-3FQ3Version ranges need review. api-platform/coreapi-platform/graphql Composer High Fix reported
GraphQL query operations security can be bypassedCVE-2025-31481 · GHSA-CG3C-245W-728MVersion ranges need review. api-platform/coreapi-platform/graphql Composer High Fix reported
API Platform Core can leak exceptions message that may contain sensitive informationCVE-2023-47639 · GHSA-RFW5-CQJJ-7V9R api-platform/core Composer Medium Fix reported
API Platform Core does not call GraphQl securityAfterResolverCVE-2025-23204 · GHSA-7MXX-3CGM-XXV3 api-platform/core Composer Medium Fix reported
Incorrect Access Control vulnerability in api-platform/coreCVE-2019-1000011 · GHSA-974J-WJXX-WGGJVersion ranges need review. api-platform/core Composer Medium Fix reported