Approved changes feed: RSS · Atom

cpe:2.3:a:hasura:graphql_engine:1.0.0:beta.1:*:*:*:*:*:*

part: a version: 1.0.0 update: beta.1

VendorHasura (06d0bbac-ff6d-5740-8bd3-432231a37a86)
ProductGraphql Engine (638d8014-b2f8-5df5-9652-9e813bcf30cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/hasura/graphql-engine purl2cpe 2026-06-01 10:11:06.304178
pkg:github/hasura/graphql-engine purl2cpe 2026-06-01 10:11:06.304179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-1020015 vulnerable 2026-06-08 05:12:21.886584 Details available
graphql-engine (aka Hasura GraphQL Engine) before 1.0.0-beta.3 mishandles the audience check while verifying JWT.
Published: 2019-07-29T12:21:40.000Z
Updated: 2024-08-05T03:14:16.238Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.