Package impact
Packagist / silverstripe/graphql
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-44401 | unknown | — | — | 2y ago | View permissions are bypassed for paginated lists of ORM data | |||
| CVE-2023-40180 | unknown | — | — | 3y ago | Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries | |||
| CVE-2023-28104 | unknown | — | — | 3y ago | DDOS attack on graphql endpoints | |||
| CVE-2020-6165 | unknown | — | — | 4y ago | Silverstripe has Incorrect Default Permissions | |||
| CVE-2019-12437 | unknown | — | — | 4y ago | Silverstripe CSRF Protection Bypass via GraphQL | |||
| CVE-2021-28661 | unknown | — | — | 5y ago | SilverStripe GraphQL Server permission checker not inherited by query subclass. | |||
| CVE-2020-26136 | unknown | — | — | 5y ago | Authentication bypass in SilverStripe GraphQL |