Skip to content
OpenAdvisories

Package · npm

@escape.tech/graphql-armor-max-depth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    GHSA-224p-v68g-5g8f

    GraphQL Armor Max-Depth Plugin Bypass via fragment caching

    ### Summary A query depth restriction using the max-depth can be bypassed if `ignoreIntrospection` is enabled (which is the default configuration) by naming your query/fragment `__schema`. ### Details In the `countDepth` function, we have the following code t…

    @escape.tech/graphql-armor-max-depth npm
  • Medium 5.3
    GHSA-hmfr-rx46-4jx2

    GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation

    ### Summary A query depth restriction using the `max-depth` property can be bypassed if `ignoreIntrospection` is enabled (which is the default configuration) by naming your query/fragment `__schema`. ### Details At the start of the `countDepth` function, we h…

    @escape.tech/graphql-armor-max-depth npm