webonyx/graphql-php
A PHP port of GraphQL reference implementation
88%
Total Score
healthy
Active, mature project with frequent releases; all 27 workflow actions are unpinned.
Health Score Breakdown
The project uses Make and Composer for builds, but no security-scanning tools were detected; the repository's separate security policy partly compensates for this tooling gap.
All five workflows were analyzed without failed files, dangerous triggers, untrusted checkouts, or audit findings, and two scope permissions at job level. However, all 27 analyzed action references are unpinned, leaving avoidable maintenance and supply-chain hygiene risk.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10553 webonyx/graphql-php is vulnerable to Denial of service (DoS) in versions 0.0.1 - 15.32.1. | 0.0.1 - 15.32.1 | High |
CVE-2026-40476 webonyx/graphql-php is vulnerable to Inefficient Algorithmic Complexity in versions 0.0.0 - 15.31.4. | 0.0.0 - 15.31.4 | High |
AIKIDO-2024-10392 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. webonyx/graphql-php is vulnerable to Uncontrolled Recursion in versions 0.6.0 - 15.12.4. | 0.6.0 - 15.12.4 | Medium |
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 22 hours ago
- Created
- 11 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.