GraphQL - API Security Blog

CVE-2025-31485 GraphQL grant on a property might be cached with different objects

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Prior to 4.0.22, a GraphQL grant on a property might be cached with different objects. The ApiPlatformGraphQlSerializer ...

April 03, 2025

CVE-2023-47639 API Platform Core can leak exceptions message that may contain sensitive information

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This ...

April 03, 2025

CVE-2023-47639 API Platform Core can leak exceptions message that may contain sensitive information

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. From 3.2.0 until 3.2.4, exception messages, that are not HTTP exceptions, are visible in the JSON error response. This ...

April 03, 2025

RHSA-2025:3490 Red Hat Security Advisory: Satellite 6.16.4 Async Update

Bulletin has no...Read More ...

April 03, 2025

RHSA-2025:3492 Red Hat Security Advisory: Satellite 6.14.4.5 Async Update

Bulletin has no...Read More ...

April 03, 2025

RHSA-2025:3491 Red Hat Security Advisory: Satellite 6.15.5.2 Async Update

Bulletin has no...Read More ...