Read More ...

Continue Reading

March 29, 2023

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44 ...

Continue Reading

March 27, 2023

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44 ...

Continue Reading

March 27, 2023

Thunder is a Drupal distribution for professional publishing. The thunder distribution ships the thunder_gqls module which provides a graphql interface. The module doesn't sufficiently check access wh ...

Continue Reading

March 27, 2023

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44 ...

Continue Reading

March 27, 2023

In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4, 17.5, and 0.0.0-2023-03-20T01-49-44 ...

Continue Reading

March 27, 2023

[![](https://blogger.googleusercontent.com/img/a/AVvXsEgL3MLHu1cARwXIirYVPLX_4TlTK1evGLBNS7jVThufKErSdgIWSx7KQkobRZxVEvGnEi74WWDJ1cziEoefKuvYGqRyDMmQ88CNopkcs5ppKa3rqEqmskizyvmfCyrrR35j97E6sHFYbvqy2Xw ...

Continue Reading

March 26, 2023

ICYMI, we recently presented **A CISOs Guide to the New 2023 OWASP API Security Update**. In this first of two planned webinars, Stepan Ilyin and Tim Ebbers provided an overview of what’s in and ...

Continue Reading

March 23, 2023