MEDIUM5.3Packagist
GHSA-589q-75r3-mfq4· BIT-silverstripe-2020-6165, CVE-2020-6165Silverstripe has Incorrect Default Permissions
Modified: 2/16/2024
package
Packagist/silverstripe/graphql
pkg:packagist/silverstripe/graphql
HIGH7.5Packagist
GHSA-67g8-c724-8mp3· CVE-2023-28104DDOS attack on graphql endpoints
Modified: 9/10/2026
HIGH8.8Packagist
GHSA-fx37-56v6-85q6· CVE-2019-12437Silverstripe CSRF Protection Bypass via GraphQL
Modified: 2/16/2024
MEDIUM5.3Packagist
GHSA-jgph-w8rh-xf5p· CVE-2023-44401View permissions are bypassed for paginated lists of ORM data
Modified: 2/16/2024
MEDIUM6.5Packagist
GHSA-mg2g-8pwj-r2j2· BIT-silverstripe-2020-26136, CVE-2020-26136Authentication bypass in SilverStripe GraphQL
Modified: 2/17/2024
MEDIUM4.3Packagist
GHSA-r7rh-g777-g5gx· BIT-silverstripe-2021-28661, CVE-2021-28661SilverStripe GraphQL Server permission checker not inherited by query subclass.
Modified: 2/16/2024
HIGH7.5Packagist
GHSA-v23w-pppm-jh66· CVE-2023-40180Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries
Modified: 9/10/2026
HIGH7.3Packagist
GHSA-wjg9-v8cf-f5q2silverstripe/graphql Cross-Site Request Forgery vulnerability
Modified: 12/3/2024