If you have found any issues that might have security implications, please read reporting instructions in our security policy.
PLEASE DO NOT PUBLISH SECURITY REPORTS PUBLICLY.
Security: api-platform/core
Security
.github/SECURITY.md
-
GraphQL grant on a property might be cached with different objectsGHSA-428q-q3vv-3fq3 published
Apr 3, 2025 by soyukaHigh -
GraphQL query operations security can be bypassedGHSA-cg3c-245w-728m published
Apr 3, 2025 by soyukaHigh -
GraphQl securityAfterResolver not calledGHSA-7mxx-3cgm-xxv3 published
Mar 24, 2025 by dunglasModerate -
Exceptions message that may contain sensitive information can leakGHSA-rfw5-cqjj-7v9r published
Apr 3, 2025 by soyukaModerate -
Secured properties may be accessible within collectionsGHSA-vr2x-7687-h6qv published
Feb 28, 2023 by dunglasHigh
Learn more about advisories related to api-platform/core in the GitHub Advisory Database