FazBrowse GitHub Viewer | Trending | | Home

Tools: [Download Repo ZIP] [Original HTTPS Page]

Overview · api-platform/core · GitHub

Security

Report a vulnerability

.github/SECURITY.md

Security Policy

If you have found any issues that might have security implications, please read reporting instructions in our security policy.

PLEASE DO NOT PUBLISH SECURITY REPORTS PUBLICLY.

Relation IRIs are not type-checked: a related resource can be denormalised as the wrong resource type (type confusion)
GHSA-9rjg-x2p2-h68h published Jun 13, 2026 by soyuka

Moderate
Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate
GHSA-pjhx-3c3w-9v23 published Jun 4, 2026 by soyuka

Moderate
GraphQL grant on a property might be cached with different objects
GHSA-428q-q3vv-3fq3 published Apr 3, 2025 by soyuka

High
GraphQL query operations security can be bypassed
GHSA-cg3c-245w-728m published Apr 3, 2025 by soyuka

High
GraphQl securityAfterResolver not called
GHSA-7mxx-3cgm-xxv3 published Mar 24, 2025 by dunglas

Moderate
Exceptions message that may contain sensitive information can leak
GHSA-rfw5-cqjj-7v9r published Apr 3, 2025 by soyuka

Moderate
Secured properties may be accessible within collections
GHSA-vr2x-7687-h6qv published Feb 28, 2023 by dunglas

High

Learn more about advisories related to api-platform/core in the GitHub Advisory Database

Back | FazBrowse Home | New Git URL