Posts tagged with #graphql

• CVSS 6.5 Persistent State Corruption in Linear.app

  Dec 10, 2025 (3 months ago) 1000 rvfet

  

  logic-bug graphql dos writeups

  Affected Company:

  Linear.app

  How I discovered a logic flaw in Linear.app's optimistic UI architecture that allowed authenticated users to permanently 'brick' other accounts via ID collision, resulting in a persistent Denial of Service (DoS) with no recovery path.

  Full Write-up