CVE-2026-31317
Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the vendor/markhuot/craftql/src/Listeners/GetAssetsFieldSchema.php file
Published Updated
PatchFirst · Latest vulnerabilities
markhuot/craftql vulnerabilities
Vulnerabilities published for markhuot/craftql in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Check your server
Check your installed stack and versions against the current vulnerability feeds.