A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.

A vulnerability was found in GraphQL due to improper access controls on the GraphQL introspection query. This flaw allows unauthorized users to retrieve a comprehensive list of available queries and mutations. Exposure to this flaw increases the attack surface, as it can facilitate the discovery of flaws or errors specific to the application's GraphQL implementation.

Security update for govulncheck-vulndb

PostCSS: Improper input validation in PostCSS golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS containers/image: digest type does not guarantee valid type go-retryablehttp: url might write sensitive information to log file openshift-console: OAuth2 insufficient state parameter entropy openshift/builder: Path traversal allows command injection in privileged BuildContainer using docker build strategy Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass rsync: Info Leak via Uninitialized Stack Contents ose-olm-catalogd-container: incomplete fix for rapid reset (CVE-2023-39325/CVE-2023-44487) cross-spawn: regular expression denial of service golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON axios: axios: Server-Side Request Forgery Bare Metal Operator: BMO can expose particularly named secrets from other namespaces via BMH CRD path-to-regexp: Backtracking regular expressions cause ReDoS golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html openshift-controller-manager: Elevated Build Pods Can Lead to Node Compromise in OpenShift openstack-ironic: Lack of checksum validation on images dompurify: DOMPurify vulnerable to tampering by prototype pollution GraphQL: Denial of Service (DoS) v…

Security update for govulncheck-vulndb