All products

silverstripe/graphql

Composer · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
DDOS attack on graphql endpointsCVE-2023-28104 · GHSA-67G8-C724-8MP3Version ranges need review. silverstripe/graphql Composer High Fix reported
Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queriesCVE-2023-40180 · GHSA-V23W-PPPM-JH66Version ranges need review. silverstripe/graphql Composer High Fix reported
silverstripe/graphql Cross-Site Request Forgery vulnerabilityGHSA-WJG9-V8CF-F5Q2 · PKSA-C7X9-SMQG-QMJV silverstripe/graphql Composer High Fix reported
View permissions are bypassed for paginated lists of ORM dataCVE-2023-44401 · GHSA-JGPH-W8RH-XF5PVersion ranges need review. silverstripe/graphql Composer Medium Fix reported
Silverstripe CSRF Protection Bypass via GraphQLCVE-2019-12437 · GHSA-FX37-56V6-85Q6Version ranges need review. silverstripe/graphql Composer High Fix reported
Authentication bypass in SilverStripe GraphQLCVE-2020-26136 · GHSA-MG2G-8PWJ-R2J2Version ranges need review. silverstripe/graphql Composer Medium Fix reported
Silverstripe has Incorrect Default Permissions CVE-2020-6165 · GHSA-589Q-75R3-MFQ4 silverstripe/graphqlsilverstripe/recipe-cms Composer Medium Fix reported
SilverStripe GraphQL Server permission checker not inherited by query subclass.CVE-2021-28661 · GHSA-R7RH-G777-G5GX silverstripe/graphql Composer Medium Fix reported