Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Secure your Apollo GraphQL server with Semgrep

blog.trailofbits.com | blog | #graphql | #csrf | #static-analysis | #semgrep | #apollo-server | #cors

Summary

Trail of Bits added nine Semgrep rules to detect CSRF, rate-limiting, and CORS misconfigurations in Apollo GraphQL server v3 and v4, with guidance on fixing common GraphQL security flaws.
Published
Collected

original ↗

Related coverage

  1. One year of Opengrep: What we built and what’s next (aikido.dev)
  2. Rust-proof your code with our new Testing Handbook chapter (blog.trailofbits.com)
  3. Lack of isolation in agentic browsers resurfaces old vulnerabilities (blog.trailofbits.com)
  4. Uncovering memory corruption in NVIDIA Triton (as a new hire) (blog.trailofbits.com)
  5. 35 more Semgrep rules: infrastructure, supply chain, and Ruby (blog.trailofbits.com)
  6. Announcing the Trail of Bits and Semgrep partnership (blog.trailofbits.com)

back