Log in Start free

api-platform

Products

ProductCVEsExploitedLatest
core7–Jul 1, 2026
api-platform/hal1–Jul 1, 2026
api-platform/json-api1–Jul 1, 2026

Exploited and recent CVEs

  • CVE-2026-49858 Medium 5.9 API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate 0.3%
  • CVE-2026-49858 Medium 5.9 API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate 0.3%
  • CVE-2026-49858 Medium 5.9 API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate 0.3%
  • CVE-2026-54164 Medium 6.5 API Platform Core: Missing IRI type check enables resource type confusion 0.3%
  • CVE-2025-31485 High 7.5 GraphQL grant on a property might be cached with different objects 0.6%
  • CVE-2025-31481 High 7.5 GraphQL query operations security can be bypassed 0.5%
  • CVE-2023-47639 Medium 5.3 API Platform Core can leak exceptions message that may contain sensitive information 0.4%
  • CVE-2025-23204 Medium 4.4 GraphQl securityAfterResolver not called 0.3%
  • CVE-2023-25575 High 7.7 Secured properties in API Platform Core may be accessible within collections 0.6%