Vulnerabilities > Hasura > Graphql Engine > 2.10.0

DATE CVE VULNERABILITY TITLE RISK
2023-03-14 CVE-2023-27588 Path Traversal vulnerability in Hasura Graphql Engine
Hasura is an open-source product that provides users GraphQL or REST APIs.
network
low complexity
hasura CWE-22
7.5
7.5
2022-12-08 CVE-2022-46792 Incorrect Authorization vulnerability in Hasura Graphql Engine
Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends.
network
low complexity
hasura CWE-863
8.8
8.8