Hasura vulnerabilities

Products

• Graphql Engine 8
• Graphql-engine 3
• Graphql 3

Newest

• hasura graphql-engine, graphql engine +1 more Hasura: Row-level authorization bypass on table computed fields CVE-2026-54698 6.0 MediumJuly 7, 2026
• @tinacms graphql, hasura graphql engine +1 more Hasura GraphQL 1.3.3 - Remote Code Execution CVE-2021-47748 9.3 CriticalJanuary 21, 2026
• hasura graphql, graphql engine +1 more Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection CVE-2021-47715 6.9 MediumDecember 22, 2025
• hasura graphql, graphql engine +1 more Hasura GraphQL 1.3.3 Local File Read via SQL Injection CVE-2021-47714 6.9 MediumDecember 22, 2025
• hasura graphql, graphql engine +1 more Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query CVE-2021-47713 8.7 HighDecember 22, 2025
• hasura graphql engine, graphql-engine +1 more Unauthenticated path traversal vulnerability in Hasura GraphQL Engine CVE-2023-27588 7.5 HighMarch 14, 2023
• hasura graphql engine Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for... CVE-2022-46792 8.8 HighDecember 8, 2022
• graphql-engine, hasura graphql engine +1 more graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check... CVE-2019-1020015 7.5 HighJuly 29, 2019