Hasura vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20253
3. 20262

Newest CVEs

• CVE-2026-54698

  Hasura: Row-level authorization bypass on table computed fields

  hasura · graphql-engine

  Medium6.0
• CVE-2021-47748

  Hasura GraphQL 1.3.3 - Remote Code Execution

  Hasura · GraphQL

  Critical9.3
• CVE-2021-47715

  Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection

  Hasura · Hasura GraphQL

  Medium6.9
• CVE-2021-47714

  Hasura GraphQL 1.3.3 Local File Read via SQL Injection

  Hasura · Hasura GraphQL

  Medium6.9
• CVE-2021-47713

  Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query

  Hasura · Hasura GraphQL

  High8.7
• CVE-2023-27588

  Unauthenticated path traversal vulnerability in Hasura GraphQL Engine

  hasura · graphql-engine

  High7.5