GraphQL, an open-source data query language for APIs, has been becoming more prevalent in modern applications. A brief overview of the technology as well as vulnerabilities an attacker may leverage to exploit GraphQL will be explored in this presentation.