aws-amplify/graphql-api-construct vulnerabilities

CVEs whose affected-version data names the aws-amplify/graphql-api-construct package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108096Medium· 6.5

3w ago

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same applicat…

Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user to read records owned by other users of the same applicat…

▾ SunlitAWS · aws-amplify/graphql-index-transformerEPSS 0.30%via NVD