Security Test: Mismatching persisted queries and schema¶

Scanner(s) Support¶

Description¶

Default Severity: medium

Persisted queries are like pre-written commands your system stores so it doesn’t have to build each query from scratch every time. When these saved queries don’t line up with changes made to the API’s schema, the application might send old or mistyped commands that no longer match the system’s current layout. This mismatch causes failures or unexpected behavior and can inadvertently open up weaknesses if those “stale” queries aren’t carefully checked or updated. Developers sometimes assume the stored queries will always be correct, even when the underlying data model changes, which leads to errors and potential security issues if the system ends up processing unintended or insecure commands.

Configuration¶

Identifier: schema/mismatching_persisted_queries_and_schema

Examples¶

All configuration available:

checks:
  schema/mismatching_persisted_queries_and_schema:
    skip: false # default

Compliance and Standards¶