silverstripe/graphql
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| DDOS attack on graphql endpoints | silverstripe/graphql | Composer | High | Fix reported | |
| Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries | silverstripe/graphql | Composer | High | Fix reported | |
| silverstripe/graphql Cross-Site Request Forgery vulnerability | silverstripe/graphql | Composer | High | Fix reported | |
| View permissions are bypassed for paginated lists of ORM data | silverstripe/graphql | Composer | Medium | Fix reported | |
| Silverstripe CSRF Protection Bypass via GraphQL | silverstripe/graphql | Composer | High | Fix reported | |
| Authentication bypass in SilverStripe GraphQL | silverstripe/graphql | Composer | Medium | Fix reported | |
| Silverstripe has Incorrect Default Permissions | silverstripe/graphqlsilverstripe/recipe-cms | Composer | Medium | Fix reported | |
| SilverStripe GraphQL Server permission checker not inherited by query subclass. | silverstripe/graphql | Composer | Medium | Fix reported |

