Core

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. API Platform version from 2.2.0 to 2.3.5 contains an Incorrect Access Control vulnerability in GraphQL delete mutations that can result in a user authorized to delete a resource c…CVE-2019-1000011Api-Platform · 1.0% likely
2. GraphQL grant on a property might be cached with different objectsCVE-2025-31485api-platform · CVSS 7.5 · 0.6% likely

   CWE-696

3. Secured properties in API Platform Core may be accessible within collectionsCVE-2023-25575api-platform · CVSS 7.7 · 0.6% likely

   CWE-842

4. GraphQL query operations security can be bypassedCVE-2025-31481api-platform · CVSS 7.5 · 0.5% likely

   CWE-863

5. API Platform Core can leak exceptions message that may contain sensitive informationCVE-2023-47639api-platform · CVSS 5.3 · 0.4% likely

   CWE-209

6. API Platform Core: Missing IRI type check enables resource type confusionCVE-2026-54164api-platform · CVSS 6.5 · 0.3% likely

   CWE-843

7. API Platform Core: Cross-user attribute leak in JSON:API and HAL item normalizers due to missing isCacheKeySafe gateCVE-2026-49858api-platform · CVSS 5.9 · 0.3% likely

   CWE-524

8. GraphQl securityAfterResolver not calledCVE-2025-23204api-platform · CVSS 4.4 · 0.3% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.