Five Major Vulnerabilities in GraphQL

GraphQL (GQL) is a data query language used commonly in modern web and mobile applications as a key part of the technology stack. GQL simplifies fetching data from a server to a client via an API call. This article recaps some thoughts from a post by carvesystems.com, covering the five most common GraphQL vulnerabilities, how to use a GQL “goat” to exemplify vulnerabilities, and some tooling to evaluate GQL implementation.

Create a GraphQL API With Node, Mongoose, and Express

Everything is connected...


GraphQL is a technology that helps developers across the board to build more robust software more quickly. The ability to request all of the information you need in a single request is a game-changer. It has simplified my backend development of APIs for consumption by mobile and web applications that would normally rely on RESTful APIs. A normal RESTful API may have several endpoints for various entities (e.g. users, submissions, etc.); with GraphQL, you can get all of this information in a single go using GraphQL's query language, also known as GQL.