← Database

CVE-2025-31481

HIGH CVSS: 7.5 Published: 2025-04-03 Modified: 2026-06-17

Description

API Platform Core is a system to create hypermedia-driven REST and GraphQL APIs. Using the Relay special node type you can bypass the configured security on an operation. This vulnerability is fixed in 4.0.22 and 3.4.17.

Affected Platforms

Unknown

Weakness Type

CWE-863

References