com.yahoo.elide:elide-core@4.2.11 vulnerabilities
-
latest version
7.0.4
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
a month ago
-
licenses detected
- [1.0.0.1,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.yahoo.elide:elide-core package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
com.yahoo.elide:elide-core is a library that lets you stand up a GraphQL/JSON-API web service with minimal effort. Affected versions of this package are vulnerable to Improper Authorization. An adversary can "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model. How to fix Improper Authorization? Upgrade |
[,4.5.14)
|