Repository navigation
Security: Dastari/graphql-orm
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Nothing enforces AI runtime closure after a database backup restore; consumed approvals become usable againGHSA-mw7q-9x7g-54v8 published
Nov 11, 2026 by DastariModerate -
Runtime DateTime and JSON inputs can be stored in a form that later reads cannot decodeGHSA-pv83-2472-2hq8 published
Nov 11, 2026 by DastariModerate -
order_aggregate count ordering ignores target read visibilityGHSA-f7xj-6695-ww2q published
Nov 10, 2026 by DastariModerate -
Step-up assurance is not enforced on runtime GraphQL mutations or unregistered mutation rootsGHSA-2276-r4j8-v779 published
Nov 11, 2026 by DastariModerate -
Search-document and change-journal tables hold tenant data with no RLSGHSA-7gw2-974x-qhrh published
Nov 11, 2026 by DastariModerate -
No check that the PostgreSQL runtime role is subject to RLS; documented fail-closed behaviour is not implementedGHSA-hr7v-hr83-2jj4 published
Nov 11, 2026 by DastariModerate -
SMB client has unbounded server-driven resource useGHSA-4c3m-362v-gjqp published
Nov 11, 2026 by DastariModerate -
SMB client is NTLM-only and re-sends the NTLMv2 response on every automatic reconnectGHSA-x4jh-5r93-5jg3 published
Nov 11, 2026 by DastariModerate -
Vendored SMB client acts on error responses before verifying signing or encryptionGHSA-439h-2cx8-xwgx published
Nov 10, 2026 by DastariHigh -
HTTP (SSE/multipart) subscriptions do not get the WebSocket gateway's controlsGHSA-3qf7-j9r6-6qv3 published
Nov 10, 2026 by DastariHigh
Learn more about advisories related to Dastari/graphql-orm in the GitHub Advisory Database