What’s Vulnerable › Products

Hasura GraphQL vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Hasura GraphQL version is affected

Latest Hasura GraphQL vulnerabilities

• CVE-2026-54698 — Hasura: Row-level authorization bypass on table computed fields (CVSS 5.9)
• CVE-2021-47748 — Hasura GraphQL 1.3.3 - Remote Code Execution (CVSS 9.8)
• CVE-2021-47715 — Hasura GraphQL 1.3.3 Server-Side Request Forgery via Remote Schema Injection (CVSS 5.3)
• CVE-2021-47714 — Hasura GraphQL 1.3.3 Local File Read via SQL Injection (CVSS 5.5)
• CVE-2021-47713 — Hasura GraphQL 1.3.3 Denial of Service via Malicious GraphQL Query (CVSS 7.5)
• CVE-2023-27588 — Unauthenticated path traversal vulnerability in Hasura GraphQL Engine (CVSS 7.5)
• CVE-2022-46792 — (CVSS 8.8)
• CVE-2019-1020015 — (CVSS 7.5)