Hasura vulnerabilities
6 published CVEs name Hasura among the affected products.
- 6Published CVEs6 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54698
Hasura: Row-level authorization bypass on table computed fields
hasura · graphql-engine
Medium6.0 - CVE-2021-47748
Hasura GraphQL 1.3.3 - Remote Code Execution
Hasura · GraphQL
Critical9.3 - CVE-2021-47715
Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection
Hasura · Hasura GraphQL
Medium6.9 - CVE-2021-47714
Hasura GraphQL 1.3.3 Local File Read via SQL Injection
Hasura · Hasura GraphQL
Medium6.9 - CVE-2021-47713
Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query
Hasura · Hasura GraphQL
High8.7 - CVE-2023-27588
Unauthenticated path traversal vulnerability in Hasura GraphQL Engine
hasura · graphql-engine
High7.5