-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from a missing break statement in the 'after_resolver' case of the provide() method. This caused the GraphQL securityAfterResolver logic to be replaced by the default security configuration, violating the intended security workflow. The fix explicitly adds the missing 'break;', confirming this was the root cause. The function's role in security enforcement and direct linkage to the CWE-484 (omitted break) make it the clear vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| api-platform/core | composer |