Skip to content
OpenAdvisories

Vendor

hasura

6 known vulnerabilities.

Products

Hasura GraphQL 3 graphql-engine 2 GraphQL 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2021-47713

    Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query

    Hasura GraphQL 1.3.3 contains a denial of service vulnerability that allows attackers to overwhelm the service by crafting malicious GraphQL queries with excessive nested fields. Attackers can send repeated requests with extremely long query strings and multi…

    hasura Hasura GraphQL
  • High 7.5
    CVE-2023-27588

    Unauthenticated path traversal vulnerability in Hasura GraphQL Engine

    Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL Engine prior to versions 1.3.4, 2.55.1, 2.20.1, and 2.21.0-beta1. Projects running on Hasura Cloud were not vul…

    hasura graphql-engine