CVE-2025-31481
GraphQL query operations security can be bypassed
Résumé
GraphQL query operations security can be bypassed
Description d'origine
La description telle que publiée par la source (souvent en anglais).
API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This vulnerability is fixed in 4.0.22 and 3.4.17.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com