aws-amplify/graphql-api-construct

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2026-108096

Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted querie…

AWS aws-amplify/graphql-api-construct aws-amplify/graphql-index-transformer aws-amplify/data-construct

Oct 9, 2026