Findings

Unexpected GraphQL Response

Updated: June 19, 2025

Description

Severity: Medium

GraphQL response is not a JSON object.

GraphQL responses are typically expected to be JSON objects containing data and optional error information. This error commonly arises when the server returns a response in a format that deviates from the GraphQL specification, such as plain text, HTML, or a different data format, which prevents proper parsing and handling by the client application. Addressing this issue involves ensuring that the server consistently adheres to GraphQL's expected JSON response structure to facilitate correct data consumption and processing by client-side applications.

Remediation

Investigate server logs to determine the root cause for this.

Previous (Findings - Action based findings)
Undocumented HTTP status code
Next (Findings - Action based findings)
Unhandled Errors in GraphQL Endpoint