graphql-go project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

graphql-go project records in CISA KEV

No graphql-go project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2026-55334 CVE-2026-80051 · GHSA-w74q-3pp2-465h

MEDIUM 60

github.com/graphql-go/graphql (GraphQL for Go) through 0.8.1 does not validate that a scalar variable value matches its declared type.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00184 Published 2026-08-25 No fix listed CWE-1287

TI-2022-17395 CVE-2022-37315 · GHSA-h3qm-jrrf-cgj3

LOW 35

graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01211 Published 2022-08-01 Fixed in 0.8.1 CWE-674

TI-2022-06084 CVE-2022-21708 · GHSA-mh3m-8c74-74xh

LOW 31

graphql-go is a GraphQL server with a focus on ease of use.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01243 Published 2022-01-21 Partial fix · 1.3.0 CWE-400