api-platform

Top products

The 8 most recently published vulnerabilities affecting api-platform.

• CVE-2026-49858API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate5.9Jul 1, 2026
• CVE-2026-54164API Platform Core: Missing IRI type check enables resource type confusion6.5Jul 1, 2026
• CVE-2025-31485GraphQL grant on a property might be cached with different objects7.5Apr 3, 2025
• CVE-2025-31481GraphQL query operations security can be bypassed7.5Apr 3, 2025
• CVE-2023-47639API Platform Core can leak exceptions message that may contain sensitive information5.3Apr 3, 2025
• CVE-2025-23204GraphQl securityAfterResolver not called4.4Mar 24, 2025
• CVE-2023-25575Secured properties in API Platform Core may be accessible within collections7.7Feb 28, 2023
• CVE-2019-1000011API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource can delete any reso...6.5Feb 4, 2019