Log in Start free

Hasura

Products

ProductCVEsExploitedLatest
Hasura GraphQL3–Dec 22, 2025
graphql-engine2–Jul 7, 2026
GraphQL1–Jan 21, 2026

Exploited and recent CVEs

  • CVE-2026-54698 Medium 6.0 Hasura: Row-level authorization bypass on table computed fields 0.3%
  • CVE-2021-47748 Critical 9.8 Hasura GraphQL 1.3.3 - Remote Code Execution 1.1%
  • CVE-2021-47715 Medium 5.3 Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection 0.4%
  • CVE-2021-47714 Medium 5.5 Hasura GraphQL 1.3.3 Local File Read via SQL Injection 0.2%
  • CVE-2021-47713 High 7.5 Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query 0.5%
  • CVE-2023-27588 High 7.5 Unauthenticated path traversal vulnerability in Hasura GraphQL Engine 1.3%