RST Threat feed. IOC: graphql.instagram.com.reactivation.services

Found **graphql[.]instagram.com.reactivation.services** in [RST...Read More ...

Continue Reading
This Week in Spring – June 14th, 2022

Hi, Spring fans! Welcome to another installment of _This Week in Spring_! I've just arrived in beautiful Berlin, Germany, for the forthcoming [We Are Developers]() show with more than five thousand at ...

Continue Reading
Spring Tips: Learn Spring for GraphQL (parts 3 and 4 of an ongoing series)

Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead [Rossen Stoyanchev (@rstoya05)]() - whose ...

Continue Reading
CVE-2022-1902

A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes. Notifier secrets were not properly sanitized in the GraphQL API. This flaw allows authenticated ACS users to retrieve Notifier ...

Continue Reading
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx

### Impact The gatsby-plugin-mdx plugin prior to versions 3.15.2 and 2.14.1 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configurat ...

Continue Reading
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx

### Impact The gatsby-plugin-mdx plugin prior to versions 3.15.2 and 2.14.1 passes input through to the `gray-matter` npm package, which is vulnerable to JavaScript injection in its default configurat ...

Continue Reading
Spring Tips: Learn Spring for GraphQL (parts 1 and 2 of an ongoing series)

Hi, Spring fans! In thi^^^ these installments, we begin a new series introducing the Spring for GraphQL project. In this first installment, GraphQL Java lead [Andi Marek (@andimarek)]() and [ I (@sta ...

Continue Reading
Improper Access Control in wp-graphql

The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a remote attacker could forge a GraphQL quer ...

Continue Reading

Back to Main

Subscribe for the latest news: