com.yahoo.elide:elide-graphql@7.0.5

7.1.17

8 years ago

3 months ago

Direct Vulnerabilities

Known vulnerabilities in the com.yahoo.elide:elide-graphql package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Missing Authorization Affected versions of this package are vulnerable to Missing Authorization in the `SortingImpl.getValidSortingRules` process. An attacker can infer the values of restricted fields by analyzing the order of rows returned through both JSON:API and GraphQL read paths. How to fix Missing Authorization? There is no fixed version for `com.yahoo.elide:elide-graphql`.	[0,)