CVE-2025-31481 — GraphQL query operations security can be bypassed
API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This v…
Published: 2025-04-03 · CVSS: 7.5 · CVSS 3.1
API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This vulnerability is fixed in 4.0.22 and 3.4.17.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7