Potential security vulnerability with computed fields on v1.3

208 views

Skip to first unread message

Shahidh K Muhammed

unread,

Sep 7, 2020, 2:34:28 PM9/7/20

to Hasura Security Announcements

Hello all,

We recommend that you upgrade to v1.3.2 if you’re using v1.3. We’ve fixed an issue (#5696) where the column masking in select permissions were not applied for scalar computed fields. This issue affects you only if you’re using scalar valued computed fields and if you’re not using allow-lists.