https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:35:14.739414+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-27588 CVE-2023-27588 — Unauthenticated path traversal vulnerability in Hasura GraphQL Engine 2026-10-07T00:35:14.759014+00:00

Affected: hasura graphql-engine

Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL Engine prior to versions 1.3.4, 2.55.1, 2.20.1, and 2.21.0-beta1. Projects running on Hasura Cloud were not vulnerable. Self-hosted Hasura Projects with deployments that are publicly exposed and not protected by a WAF or other HTTP protection layer should be upgraded to version 1.3.4, 2.55.1, 2.20.1, or 2.21.0-beta1 to receive a patch.