GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3909eda029125239290cdb5662c3cd265b7ce1331
GraphQL introspection enabled at /graphql Types: 452 (by kind: ENUM: 67, INPUT_OBJECT: 177, OBJECT: 198, SCALAR: 8, UNION: 2) Operations: - Query: Query | fields: status, team, teamMember, teamMembers, teams - Mutation: Mutation | fields: activateTeamMembership, addTeamMember, addTeamMembers, createTeam, deactivateTeamMembership Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa37a3108b3eeb673b1454fc6831861f06038857690
GraphQL introspection enabled at /graphql Types: 365 (by kind: ENUM: 50, INPUT_OBJECT: 150, OBJECT: 156, SCALAR: 7, UNION: 2) Operations: - Query: Query | fields: status, team, teamMember, teamMembers, teams - Mutation: Mutation | fields: activateTeamMembership, addTeamMember, addTeamMembers, createTeam, deactivateTeamMembership Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa31a0bbaa3
GraphQL introspection enabled at /graphql
Open service 142.251.141.115:443 · core.rapp.nl
2026-01-09 11:29
HTTP/1.1 403 Forbidden
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"45-MZJWZc+Y+RUbHpnhz2B2Vipii24"
x-cloud-trace-context: a78f423d30bd9860ab74a6910f05b495
date: Fri, 09 Jan 2026 11:29:13 GMT
server: Google Frontend
Content-Length: 69
Connection: close
{"message":"Forbidden resource","error":"Forbidden","statusCode":403}
Open service 142.251.141.115:443 · core.rapp.nl
2026-01-04 03:40
HTTP/1.1 403 Forbidden
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"45-MZJWZc+Y+RUbHpnhz2B2Vipii24"
x-cloud-trace-context: be85ed5b2faa1b22a3464756355d9c15
date: Sun, 04 Jan 2026 03:40:25 GMT
server: Google Frontend
Content-Length: 69
Connection: close
{"message":"Forbidden resource","error":"Forbidden","statusCode":403}
Open service 142.251.141.115:80 · core.rapp.nl
2026-01-04 03:40
HTTP/1.1 302 Found location: https://core.rapp.nl/ x-cloud-trace-context: 069f220e39f869b613bb9159679ba161 date: Sun, 04 Jan 2026 03:40:25 GMT content-type: text/html server: Google Frontend Content-Length: 0 Connection: close
Open service 2a00:1450:4001:807::2013:80 · core.rapp.nl
2026-01-04 03:40
HTTP/1.1 302 Found location: https://core.rapp.nl/ x-cloud-trace-context: 0ed932351f89939d7b7623d015e31784 date: Sun, 04 Jan 2026 03:40:25 GMT content-type: text/html server: Google Frontend Content-Length: 0 Connection: close
Open service 2a00:1450:4001:807::2013:443 · core.rapp.nl
2026-01-04 03:40
HTTP/1.1 403 Forbidden
x-powered-by: Express
vary: Origin
access-control-allow-credentials: true
content-type: application/json; charset=utf-8
etag: W/"45-MZJWZc+Y+RUbHpnhz2B2Vipii24"
x-cloud-trace-context: f766f2b6d8c15508152c9d2a08e9b5da
date: Sun, 04 Jan 2026 03:40:25 GMT
server: Google Frontend
Content-Length: 69
Connection: close
{"message":"Forbidden resource","error":"Forbidden","statusCode":403}