3490 matches found
MAL-2025-11772 Malicious code in @zalastax/nolb-graphql-x (npm)
The package @zalastax/nolb-graphql-x was found to contain malicious code...
MAL-2025-11753 Malicious code in @zalastax/nolb-graphql-e (npm)
The package @zalastax/nolb-graphql-e was found to contain malicious code...
MAL-2025-17112 Malicious code in cli-plugin-graphql (npm)
The package cli-plugin-graphql was found to contain malicious code...
MAL-2025-39875 Malicious code in xml-asthenosphere-less-loader-graphql (npm)
The package xml-asthenosphere-less-loader-graphql was found to contain malicious code...
MAL-2025-26575 Malicious code in mocha-graphql-ursa-carina (npm)
The package mocha-graphql-ursa-carina was found to contain malicious code...
MAL-2025-11749 Malicious code in @zalastax/nolb-graphql-a (npm)
The package @zalastax/nolb-graphql-a was found to contain malicious code...
Enhancing GraphQL Security by Detecting Malicious Queries Using Large Language Models, Sentence Transformers, and Convolutional Neural Networks
GraphQL's flexibility, while beneficial for efficient data fetching, introduces unique security vulnerabilities that traditional API security mechanisms often fail to address. Malicious GraphQL queries can exploit the language's dynamic nature, leading to denial-of-service attacks, data...
Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for July 2025.
Summary Security vulnerabilities are addressed with IBM Business Automation Insights 24.0.1-IF004 and 24.0.0-IF006 Vulnerability Details CVEID:CVE-2025-27789 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. When using versions of Babel prior to 7.26.10 and 8.0.0-alpha.17 t...
[SECURITY] [DLA 4263-1] ruby-graphql security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-4263-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 04, 2025 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DLA-4263-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-4263 : ruby-graphql - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4263 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4263-1 [email protected] https://www.debian.org/lts/security/...
DLA-4263-1 ruby-graphql - security update
Bulletin has no description...
CVE-2025-54536
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...
The vulnerability of the GraphQL interface of the Continuous Integration and Delivery application system JetBrains TeamCity, which allows a hacker to perform a CSRF attack
The vulnerability of the GraphQL interface of the Continuous Integration and Delivery application system CI/CD from JetBrains TeamCity is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
CVE-2025-54536
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...
CVE-2025-54536
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...
CVE-2025-54536
In JetBrains TeamCity before 2025.07 a CSRF was possible on GraphQL endpoint...
CVE-2025-54536
JetBrains TeamCity prior to 2025.07 exposes a CSRF vulnerability on the GraphQL endpoint (likely /api/graphql). Affected component: TeamCity server GraphQL handling. Root cause and exact exploit path are not detailed in the provided documents beyond the CSRF on GraphQL; exploitation is network-ac...
