Approved changes feed: RSS · Atom

cpe:2.3:a:hasura:graphql_engine:2.12.0:beta1:*:*:*:*:*:*

part: a version: 2.12.0 update: beta1

VendorHasura (06d0bbac-ff6d-5740-8bd3-432231a37a86)
ProductGraphql Engine (638d8014-b2f8-5df5-9652-9e813bcf30cf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/hasura/graphql-engine purl2cpe 2026-06-01 10:11:06.311883
pkg:github/hasura/graphql-engine purl2cpe 2026-06-01 10:11:06.311884

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46792 vulnerable 2026-06-08 05:50:39.437470 Details available
Hasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.)
Published: 2022-12-08T00:00:00.000Z
Updated: 2025-04-23T14:25:42.452Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.