Security Test: Zombie object¶

Description¶

Default Severity: low

Zombie objects are parts of your GraphQL schema that aren’t actively used but are still there, often left over from older code. They can be dangerous because someone with bad intentions might find a way to exploit them, especially since they aren't maintained or updated like the rest of your system. The main pitfall developers run into is forgetting about these dormant pieces of code, which can create unexpected security vulnerabilities if attackers manage to use them to access sensitive data or functions.

Reference:

• https://cwe.mitre.org/data/definitions/561.html

Configuration¶

Identifier: schema/zombie_object

Examples¶

All configuration available:

checks:
  schema/zombie_object:
    skip: false # default

Compliance and Standards¶