- Analyzer
- dast
- Category
- GraphQL
- Default severity
- Not encoded
- CWE
- Not encoded
- Execution
- Active
- Authentication
- Not required
- Applicability
- url
- Availability
- stable
What it detects
GraphQL behavior such as exposed introspection or unsafe operation handling.
Evidence
The GraphQL probe and structured response returned by the endpoint.
Remediation
Restrict production introspection where appropriate and enforce authorization and query controls.
Limitations
This check is limited to the applicability and evidence delivered by dast. Review the evidence in context; a match is a finding input, while confidence and policy determine its disposition.
Related reference
Analyzer Registry · Findings and release decisions · Policy and confidence · Active testing
Remediation guidance: Remediation and fix verification · Baselines and suppressions