Vulnerabilities
Neo4j GraphQL Library Fixes Critical Authentication Bypass in Version 7.6.4
A critical flaw in Neo4j’s GraphQL library allowed unauthenticated users to execute Cypher queries, a vulnerability now patched in version 7.6.4.
GraphQL
Everything Threat Times has reported about GraphQL: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
TinaCMS Patch Fixes Critical Auth Bypass in Admin Preview Route
A critical vulnerability in TinaCMS allows attackers to hijack editor sessions via crafted links, but a patch is now available for affected versions.
Vulnerabilities
AWS Amplify API Authorization Flaw Allows Cross-User Data Access
A vulnerability in AWS Amplify API components lets authenticated users access records belonging to other users through crafted queries.