{"items":[{"id":"CVE-2026-49858","published":"2026-07-01T19:24:58.170Z","updated":"2026-07-02T12:20:09.370Z","title":"API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate","severity":"MEDIUM","score":5.9,"vendor":"api-platform","product":"core","kev":false,"epss":0.00315,"kevAdded":null},{"id":"CVE-2026-54164","published":"2026-07-01T19:14:28.770Z","updated":"2026-07-02T15:50:25.125Z","title":"API Platform Core: Missing IRI type check enables resource type confusion","severity":"MEDIUM","score":6.5,"vendor":"api-platform","product":"core","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2025-31485","published":"2025-04-03T19:31:46.021Z","updated":"2025-04-08T13:15:23.510Z","title":"GraphQL grant on a property might be cached with different objects","severity":"HIGH","score":7.5,"vendor":"api-platform","product":"core","kev":false,"epss":0.00626,"kevAdded":null},{"id":"CVE-2025-31481","published":"2025-04-03T19:20:22.916Z","updated":"2025-04-08T13:14:36.379Z","title":"GraphQL query operations security can be bypassed","severity":"HIGH","score":7.5,"vendor":"api-platform","product":"core","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2023-47639","published":"2025-04-03T16:46:13.632Z","updated":"2025-04-03T18:08:26.822Z","title":"API Platform Core can leak exceptions message that may contain sensitive information","severity":"MEDIUM","score":5.3,"vendor":"api-platform","product":"core","kev":false,"epss":0.00387,"kevAdded":null},{"id":"CVE-2025-23204","published":"2025-03-24T15:53:19.156Z","updated":"2025-03-24T18:03:54.959Z","title":"GraphQl securityAfterResolver not called","severity":"MEDIUM","score":4.4,"vendor":"api-platform","product":"core","kev":false,"epss":0.00301,"kevAdded":null},{"id":"CVE-2023-25575","published":"2023-02-28T22:21:48.730Z","updated":"2025-03-07T18:36:53.149Z","title":"Secured properties in API Platform Core may be accessible within collections","severity":"HIGH","score":7.7,"vendor":"api-platform","product":"core","kev":false,"epss":0.00604,"kevAdded":null}]}