GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d8e72502780a3c9273ddaabbe872a1c0c8bc66b0
GraphQL introspection enabled at /graphql Types: 804 (by kind: ENUM: 35, INPUT_OBJECT: 173, INTERFACE: 2, OBJECT: 579, SCALAR: 12, UNION: 3) Operations: - Query: Query | fields: getMyInformation, getMyInformationV2, getUserInformation, getUserInformationV2, getUserInformationV4 - Mutation: Mutation | fields: createUser, subscribeToMobilePush, unsubscribeFromMobilePush, upsertAuthUser, upsertAuthUserV2 Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3d8e72502780a3c9273ddaabbe872a1c0c8bc66b0
GraphQL introspection enabled at /graphql Types: 804 (by kind: ENUM: 35, INPUT_OBJECT: 173, INTERFACE: 2, OBJECT: 579, SCALAR: 12, UNION: 3) Operations: - Query: Query | fields: getMyInformation, getMyInformationV2, getUserInformation, getUserInformationV2, getUserInformationV4 - Mutation: Mutation | fields: createUser, subscribeToMobilePush, unsubscribeFromMobilePush, upsertAuthUser, upsertAuthUserV2 Directives: deprecated, include, oneOf, skip, specifiedBy (total: 5)
Open service 151.101.129.91:443 · gateway-api.dev.cloud.sysco.com
2026-01-11 21:15
HTTP/1.1 503 Service Unavailable Connection: close x-sigsci-internal: 2 x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Sun, 11 Jan 2026 21:15:48 GMT Via: 1.1 varnish X-Served-By: cache-yyz4540-YYZ, cache-yyz4528-YYZ X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1768166143.086098,VS0,VE5286 X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf transfer-encoding: chunked
Open service 151.101.1.91:443 · gateway-api.dev.cloud.sysco.com
2026-01-11 21:15
HTTP/1.1 503 Service Unavailable Connection: close x-sigsci-internal: 2 x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Sun, 11 Jan 2026 21:15:48 GMT Via: 1.1 varnish X-Served-By: cache-lga21921-LGA, cache-lga21968-LGA X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1768166143.117975,VS0,VE5080 X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf transfer-encoding: chunked
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2026-01-11 21:15
HTTP/1.1 503 Service Unavailable Connection: close x-sigsci-internal: 2 x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Sun, 11 Jan 2026 21:15:48 GMT Via: 1.1 varnish X-Served-By: cache-sin-wsat1880077-SIN, cache-sin-wsat1880077-SIN X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1768166143.050988,VS0,VE5837 X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf transfer-encoding: chunked
Open service 151.101.193.91:443 · gateway-api.dev.cloud.sysco.com
2026-01-11 21:15
HTTP/1.1 503 Service Unavailable Connection: close x-sigsci-internal: 2 x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Sun, 11 Jan 2026 21:15:48 GMT Via: 1.1 varnish X-Served-By: cache-vie6343-VIE, cache-vie6328-VIE X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1768166143.006324,VS0,VE5465 X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf transfer-encoding: chunked
Open service 151.101.193.91:80 · gateway-api.dev.cloud.sysco.com
2026-01-09 19:47
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' access-control-allow-credentials: true x-content-type-options: nosniff x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Fri, 09 Jan 2026 19:47:17 GMT Via: 1.1 varnish X-Served-By: cache-vie6359-VIE, cache-vie6382-VIE X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1767988037.902836,VS0,VE541 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2026-01-08 19:37
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 access-control-allow-credentials: true content-security-policy: default-src 'none' x-content-type-options: nosniff x-powered-by: Express content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Thu, 08 Jan 2026 19:37:24 GMT Via: 1.1 varnish X-Served-By: cache-lga21977-LGA, cache-lga21938-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1767901045.666871,VS0,VE106 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.193.91:80 · gateway-api.dev.cloud.sysco.com
2026-01-02 18:13
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff content-security-policy: default-src 'none' strict-transport-security: max-age=31536000; includeSubDomains content-type: text/html; charset=utf-8 x-powered-by: Express access-control-allow-credentials: true x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Fri, 02 Jan 2026 18:13:22 GMT Via: 1.1 varnish X-Served-By: cache-vie6382-VIE, cache-vie6382-VIE X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1767377602.763447,VS0,VE467 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-30 12:16
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Tue, 30 Dec 2025 12:16:42 GMT Via: 1.1 varnish X-Served-By: cache-lga21992-LGA, cache-lga21976-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1767097003.742799,VS0,VE64 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.193.91:80 · gateway-api.dev.cloud.sysco.com
2025-12-23 00:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff content-security-policy: default-src 'none' strict-transport-security: max-age=31536000; includeSubDomains content-type: text/html; charset=utf-8 x-powered-by: Express access-control-allow-credentials: true x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Tue, 23 Dec 2025 00:11:01 GMT Via: 1.1 varnish X-Served-By: cache-lcy-egml8630091-LCY, cache-lcy-egml8630091-LCY X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766448661.179539,VS0,VE425 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.129.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:36 GMT Via: 1.1 varnish X-Served-By: cache-sin-wsat1880048-SIN, cache-sin-wsat1880036-SIN X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441496.533647,VS0,VE1224 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.1.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:36 GMT Via: 1.1 varnish X-Served-By: cache-sin-wsat1880041-SIN, cache-sin-wsat1880092-SIN X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441496.504173,VS0,VE1026 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:36 GMT Via: 1.1 varnish X-Served-By: cache-sin-wsat1880046-SIN, cache-sin-wsat1880070-SIN X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441495.468630,VS0,VE1021 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.1.91:80 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff content-security-policy: default-src 'none' strict-transport-security: max-age=31536000; includeSubDomains content-type: text/html; charset=utf-8 x-powered-by: Express access-control-allow-credentials: true x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:34 GMT Via: 1.1 varnish X-Served-By: cache-lga21962-LGA, cache-lga21962-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441494.460360,VS0,VE72 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.193.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:34 GMT Via: 1.1 varnish X-Served-By: cache-yyz4579-YYZ, cache-yyz4579-YYZ X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441495.534559,VS0,VE144 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.129.91:80 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-powered-by: Express x-content-type-options: nosniff content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:36 GMT Via: 1.1 varnish X-Served-By: cache-bom-vanm7210084-BOM, cache-bom-vanm7210032-BOM X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441495.303347,VS0,VE837 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:80 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff content-security-policy: default-src 'none' strict-transport-security: max-age=31536000; includeSubDomains content-type: text/html; charset=utf-8 x-powered-by: Express access-control-allow-credentials: true x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:34 GMT Via: 1.1 varnish X-Served-By: cache-lga21989-LGA, cache-lga21946-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441494.468536,VS0,VE72 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.193.91:80 · gateway-api.dev.cloud.sysco.com
2025-12-22 22:11
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff content-security-policy: default-src 'none' strict-transport-security: max-age=31536000; includeSubDomains content-type: text/html; charset=utf-8 x-powered-by: Express access-control-allow-credentials: true x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 22:11:35 GMT Via: 1.1 varnish X-Served-By: cache-lcy-egml8630063-LCY, cache-lcy-egml8630047-LCY X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766441495.696194,VS0,VE361 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-22 16:06
HTTP/1.1 404 Not Found Connection: close Content-Length: 139 x-content-type-options: nosniff access-control-allow-credentials: true strict-transport-security: max-age=31536000; includeSubDomains content-security-policy: default-src 'none' content-type: text/html; charset=utf-8 x-powered-by: Express x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Mon, 22 Dec 2025 16:06:20 GMT Via: 1.1 varnish X-Served-By: cache-lga21968-LGA, cache-lga21934-LGA X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1766419580.340085,VS0,VE79 Vary: Origin, Accept-Encoding X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf Page title: Error <!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>Error</title> </head> <body> <pre>Cannot GET /</pre> </body> </html>
Open service 151.101.65.91:443 · gateway-api.dev.cloud.sysco.com
2025-12-20 18:48
HTTP/1.1 503 Service Unavailable Connection: close x-sigsci-internal: 2 x-actual-backend: gateway_api_dev_cloud_sysco_com Accept-Ranges: bytes Date: Sat, 20 Dec 2025 18:49:00 GMT Via: 1.1 varnish X-Served-By: cache-vie6382-VIE, cache-vie6324-VIE X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1766256535.090917,VS0,VE5603 X-Backend: 0dvmMe0xLFL7kt3k6ehum3--F_sigsci_waf transfer-encoding: chunked