GraphQL Armor Max-Depth Plugin Bypass via Introspection Query Obfuscation

Summary A query depth restriction using the max-depth property can be bypassed if ignoreIntrospection is enabled which is the default configuration by naming your query/fragment schema. Details At the start of the countDepth function, we have the following check for the ignoreIntrospection option...

Linux Distros Unpatched Vulnerability : CVE-2025-5846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab EE affecting all versions from 16.10 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed...

Linux Distros Unpatched Vulnerability : CVE-2024-4006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all...

Linux Distros Unpatched Vulnerability : CVE-2025-27407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21,...

Linux Distros Unpatched Vulnerability : CVE-2024-8116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific...

Linux Distros Unpatched Vulnerability : CVE-2021-22228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions before 13.11.6, all versions starting from 13.12 before 13.12.6, and all versions starting from 14...

Linux Distros Unpatched Vulnerability : CVE-2022-0172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.3. Under certain conditions it was possible to bypass the IP restriction fo...

MAL-2025-21886 Malicious code in graphql-jest-cypress-build (npm)

The package graphql-jest-cypress-build was found to contain malicious code...

MAL-2025-17112 Malicious code in cli-plugin-graphql (npm)

The package cli-plugin-graphql was found to contain malicious code...

MAL-2025-26424 Malicious code in mini-css-extract-plugin-jabbah-sagitta-graphql (npm)

The package mini-css-extract-plugin-jabbah-sagitta-graphql was found to contain malicious code...

MAL-2025-22852 Malicious code in hyperion-baryon-fork-graphql (npm)

The package hyperion-baryon-fork-graphql was found to contain malicious code...

Malicious code in fornax-graphql-server-wasat (npm)

The package fornax-graphql-server-wasat was found to contain malicious code...

Malicious code in graphql-bellatrix-transport-blueshift (npm)

The package graphql-bellatrix-transport-blueshift was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-e (npm)

The package @zalastax/nolb-graphql-e was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-n (npm)

The package @zalastax/nolb-graphql-n was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-b (npm)

The package @zalastax/nolb-graphql-b was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-m (npm)

The package @zalastax/nolb-graphql-m was found to contain malicious code...

Malicious code in @zalastax/nolb-graphql-y (npm)

The package @zalastax/nolb-graphql-y was found to contain malicious code...

Malicious code in mechatronics-graphql-lepton-cryptography (npm)

The package mechatronics-graphql-lepton-cryptography was found to contain malicious code...

Malicious code in taphonomy-graphql-nodejs-isostasy (npm)

The package taphonomy-graphql-nodejs-isostasy was found to contain malicious code...