Anmelden API-Schlüssel holen

AWS aws-amplify/graphql-api-construct Schwachstellen (CVE)

Für AWS aws-amplify/graphql-api-construct veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

1 Ergebnisse

6.5Mittel

CVE-2026-108096 vor 29 Tagen

Improper authorization in query resolvers for SQL-backed models in AWS Amplify API Category

AWS aws-amplify/graphql-index-transformer; AWS aws-amplify/graphql-api-construct; AWS aws-amplify/data-construct

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same application via crafted querie…