What is GraphQL security?

GraphQL security combines authentication and authorization with controls specific to flexible query execution. Risks include excessive query depth or cost, introspection exposure decisions, data overfetching, injection through downstream systems, and resolver-level authorization gaps.