What’s Vulnerable › Products

api-platform/hal vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your api-platform/hal version is affected

Latest api-platform/hal vulnerabilities

• CVE-2026-49858 — API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gate (CVSS 5.9)