silverstripe/graphql vulnerabilities (Packagist)

8 vulnerabilities.

• silverstripe/graphql Packagist silverstripe/graphql Cross-Site Request Forgery vulnerability GHSA-wjg9-v8cf-f5q2 Fix available 7.3 HighMay 28, 2024
• silverstripe/graphql Packagist Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data CVE-2023-44401 Fix available 5.3 MediumJanuary 23, 2024
• silverstripe/graphql Packagist Denial of service vulnerability in silverstripe-graphql via recursive queries CVE-2023-40180 Fix available 7.5 HighOctober 16, 2023
• silverstripe/graphql Packagist silverstripe/graphql Denial of Service vulnerability CVE-2023-28104 Fix available 7.5 HighMarch 16, 2023
• silverstripe/graphql Packagist SilverStripe GraphQL Server permission checker not inherited by query subclass. CVE-2021-28661 Fix available 4.3 MediumOctober 7, 2021
• silverstripe/graphql Packagist Authentication bypass in SilverStripe GraphQL CVE-2020-26136 Fix available 6.5 MediumJune 8, 2021
• silverstripe/graphql Packagist Silverstripe has Incorrect Default Permissions CVE-2020-6165 Fix available 5.3 MediumJuly 15, 2020
• silverstripe/graphql Packagist Silverstripe CSRF Protection Bypass via GraphQL CVE-2019-12437 Fix available 8.8 HighFebruary 19, 2020