GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa3843a9cd3473fff9100c169003d23dba9bd98944a
GraphQL introspection enabled at /graphql Types: 251 (by kind: ENUM: 28, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 11, UNION: 10) Operations: - Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog - Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction Directives: experimental, federation__composeDirective, federation__extends, federation__external, federation__interfaceObject, inaccessible, include, key, purpleConnection, skip (total: 21) Readable stores: 1 _service (args: none) : sdl=schema @link(import : ["@key", "@shareable"], url : "https://...
Severity: medium
Fingerprint: c2db3a1c40d490db1a0bbaa38fdb7c9816dd327c31a38e3fa0f1ad50cb533f99
GraphQL introspection enabled at /graphql
Types: 249 (by kind: ENUM: 27, INPUT_OBJECT: 62, INTERFACE: 6, OBJECT: 134, SCALAR: 10, UNION: 10)
Operations:
- Query: Query | fields: _service, appConfigurationForDomain, appConfigurationForPath, appStatus, catalog
- Mutation: Mutation | fields: assignLocalPurchases, googlePlayReceipts, itunesPromoOfferSignature, itunesReceipts, uploadAppStoreTransaction
Directives: deprecated, experimental, extends, external, include, key, provides, purpleConnection, requires, skip (total: 12)
Readable stores: 1
_service (args: none) : sdl=schema {
query: Query
mutation: Mutation
}
directive @ex...
Open service 18.173.154.23:443 · sdktest.sprylabprojects.com
2026-01-09 16:05
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Content-Length: 74 Connection: close Date: Fri, 09 Jan 2026 16:05:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express Cache-Control: public, s-maxage=60, max-age=60, stale-while-revalidate=3600, stale-if-error=86400 ETag: eyJweHAiOjE3Njc5NjEzNDAwMDAsInJlcyI6MTc2NzcxODI5MzQ2NywiY29uIjoxNzY3OTUyODk5ODEwfQ== Location: https://sdktest.sprylabprojects.com/home Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 08cfbbb6f1b1bf4bc1e8ab1a071b4154.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: J7vb_NT9dHrNx3s2wRx47otZ2XxDXkejL5nGFiDtW537vcv2GcweDw== Age: 3 Moved Permanently. Redirecting to https://sdktest.sprylabprojects.com/home
Open service 18.173.154.23:443 · sdktest.sprylabprojects.com
2026-01-02 22:14
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Content-Length: 74 Connection: close Date: Fri, 02 Jan 2026 21:29:45 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express Cache-Control: public, s-maxage=60, max-age=60, stale-while-revalidate=3600, stale-if-error=86400 Location: https://sdktest.sprylabprojects.com/home ETag: eyJweHAiOjE3NjY5OTkzMzEwMDAsInJlcyI6MTc0NTg1MzIyNjY4MSwiY29uIjoxNzY2MDU5Njc1MzcyfQ== Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5951b29f5460c0b6d21eb11bce7b8168.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: 03tQxt68I9va3h6LS7lvak0XAoGutgX-t6j1euzBZpuNPYClF9GkIA== Age: 2707 Moved Permanently. Redirecting to https://sdktest.sprylabprojects.com/home
Open service 18.173.154.23:443 · sdktest.sprylabprojects.com
2025-12-22 17:06
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Content-Length: 74 Connection: close Date: Mon, 22 Dec 2025 17:06:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express Cache-Control: public, s-maxage=60, max-age=60, stale-while-revalidate=3600, stale-if-error=86400 ETag: eyJweHAiOjE3NjY0MTE1NTcwMDAsInJlcyI6MTc0NTg1MzIyNjY4MSwiY29uIjoxNzY2MDU5Njc1MzcyfQ== Location: https://sdktest.sprylabprojects.com/home Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 19392de11dadb918bd6f24e199ea180e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: LLB12n1o_BA6h3hswB1Q7YcpFAl8hwZaauVTmr_jm1Rs98bDzSNFaw== Moved Permanently. Redirecting to https://sdktest.sprylabprojects.com/home
Open service 18.173.154.23:443 · sdktest.sprylabprojects.com
2025-12-20 17:29
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Content-Length: 74 Connection: close Date: Sat, 20 Dec 2025 17:29:01 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express Cache-Control: public, s-maxage=60, max-age=60, stale-while-revalidate=3600, stale-if-error=86400 Location: https://sdktest.sprylabprojects.com/home ETag: eyJweHAiOjE3NjYwNzExNTkwMDAsInJlcyI6MTc0NTg1MzIyNjY4MSwiY29uIjoxNzY2MDU5Njc1MzcyfQ== Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2dd902cd86ee8f22d66046533880d3e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: CECjDY4ddabCbU9_xDga1IgUfSZUr6Zr3XrXv358T9WC5CQHjF-NYw== Moved Permanently. Redirecting to https://sdktest.sprylabprojects.com/home
Open service 18.173.154.23:443 · sdktest.sprylabprojects.com
2025-12-19 06:36
HTTP/1.1 301 Moved Permanently Content-Type: text/plain; charset=utf-8 Content-Length: 74 Connection: close Date: Fri, 19 Dec 2025 06:36:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains X-Powered-By: Express Cache-Control: public, s-maxage=60, max-age=60, stale-while-revalidate=3600, stale-if-error=86400 ETag: eyJweHAiOjE3NjYwNzExNTkwMDAsInJlcyI6MTc0NTg1MzIyNjY4MSwiY29uIjoxNzY2MDU5Njc1MzcyfQ== Location: https://sdktest.sprylabprojects.com/home Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 08cfbbb6f1b1bf4bc1e8ab1a071b4154.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MUC50-P3 X-Amz-Cf-Id: 5ocw0IZDd79ruaTPvD9GPybyCLFAuU9INi1H1G3QYHJZBlyf9xg_kA== Moved Permanently. Redirecting to https://sdktest.sprylabprojects.com/home