/ 
DBIx-Class-Schema-GraphQL-v0.0.3

Changes for version v0.0.3 - 2026-06-23

  • Security Fix
    • Fix SQL injection vulnerability in the plural allXs query fields. The orderBy.field argument was previously passed directly into the DBIx::Class order_by attribute without validation. It is now strictly validated against the schema source's known column names via ->has_column(). (CWE-89)
    • Added integration tests to verify orderBy.field column validation.
    • Thanks to the CPANSec Team for discovering and responsibly disclosing this vulnerability.

Modules

DBIx::Class::Schema::GraphQL
Auto-generate a GraphQL schema from a DBIx::Class schema

Other files