Skip to content
OpenAdvisories

Package · npm

@escape.tech/graphql-armor-cost-limit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    GHSA-733v-p3h5-qpq7

    GraphQL Armor Cost-Limit Plugin Bypass via Introspection Query Obfuscation

    ### Summary A query cost restriction using the `cost-limit` can be bypassed if `ignoreIntrospection` is enabled (which is the default configuration) by naming your query/fragment `__schema`. ### Details At the start of the `computeComplexity` function, we hav…

    @escape.tech/graphql-armor-cost-limit npm