10 matches found
batchql
BatchQL BatchQL एक GraphQL सुरक्षा ऑडिटिंग स्क्रिप्ट है जिसका ध्यान बैच GraphQL क्वेरी और म्यूटेशन करने पर है। यह स्क्रिप्ट जटिल नहीं है, और हम सुधारों का स्वागत करते हैं। जब हम GraphQL बैचिंग हमलों की समस्या के क्षेत्र का पता लगा रहे थे, तो हमने पाया कि इंटरनेट पर कुछ ब्लॉग पोस्ट थे, हालांकि...
Exploit for CVE-2026-5432
--- 7. CVE-2026-5432 – GraphQL Batching Alias Confusion SQL...
CVE-2026-33756
Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a single HTTP request as a JSON array but wasn't enforcing any upper limit on the number of operations. This allowed an...
CVE-2026-33756 Saleor Affected by Denial of Service via Unbounded GraphQL Query Batching
Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a single HTTP request as a JSON array but wasn't enforcing any upper limit on the number of operations. This allowed an...
EUVD-2026-20527
Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a single HTTP request as a JSON array but wasn't enforcing any upper limit on the number of operations. This allowed an...
CVE-2026-33756 Saleor Affected by Denial of Service via Unbounded GraphQL Query Batching
Saleor is an e-commerce platform. From 2.0.0 to before 3.23.0a3, 3.22.47, 3.21.54, and 3.20.118, Saleor supports query batching by submitting multiple GraphQL operations in a single HTTP request as a JSON array but wasn't enforcing any upper limit on the number of operations. This allowed an...
EUVD-2024-45178
Malicious code in bioql PyPI...
CVE-2024-50311
A denial of service DoS vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in o...
CVE-2024-50311
A denial of service DoS vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in o...
CVE-2024-50311: Allocation of Resources Without Limits or Throttling
A denial of service DoS vulnerability was found in OpenShift. This flaw allows attackers to exploit the GraphQL batching functionality. The vulnerability arises when multiple queries can be sent within a single request, enabling an attacker to submit a request containing thousands of aliases in o...