Skip to content
OpenAdvisories

Package · Packagist

markhuot/craftql

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-31317

    Craftql vulnerable to Server-Side Request Forgery

    Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the vendor/markhuot/craftql/src/Listeners/GetAssetsFieldSchema.php file

    markhuot/craftql Packagist