A Critical Vulnerability in GraphQL (CVE-2025-27407) - TZ-CERT

A Critical Vulnerability in GraphQL (CVE-2025-27407) – TZ-CERT

March 14, 2025

from_introspection (or GraphQL::Schema::Loader.load) including those that use GraphQL::Client to load external schemas via GraphQL introspection.