api-platform core

• CVE-2026-49858 Medium 5.9 API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate 0.3%
• CVE-2026-54164 Medium 6.5 API Platform Core: Missing IRI type check enables resource type confusion 0.3%
• CVE-2025-31485 High 7.5 GraphQL grant on a property might be cached with different objects 0.6%
• CVE-2025-31481 High 7.5 GraphQL query operations security can be bypassed 0.5%
• CVE-2023-47639 Medium 5.3 API Platform Core can leak exceptions message that may contain sensitive information 0.4%
• CVE-2025-23204 Medium 4.4 GraphQl securityAfterResolver not called 0.3%
• CVE-2023-25575 High 7.7 Secured properties in API Platform Core may be accessible within collections 0.6%