Skip to content
OpenAdvisories

Vendor

graphiti-api

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names

    Graphiti is a framework that sits on top of models and exposes them via a JSON:API-compliant interface. Versions prior to 1.10.2 have an arbitrary method execution vulnerability that affects Graphiti's JSONAPI write functionality. An attacker can craft a mali…