GraphQL is an open-source data query and manipulation language for APIs, and a runtime for fulfilling queries with existing data, made by Facebook.
Damn Vulnerable GraphQL is a weak implementation of GraphQL that provides a safe environment to understand GraphQL as a technology and its attack surface.
DVGA has numerous flaws, such as Injections, Code execution, Broken Access Controls, and more. For the full list of vulnerabilities, see Solutions page
2.1.2