Read the docs

graphql

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

graphql records in CISA KEV

No graphql vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Graphiql 1 record LOW Graphql 1 record MEDIUM Playground 1 record LOW

Records

1 record in Graphql · all components

TI-2023-11368 CVE-2023-26144 · GHSA-9pv7-vfvm-6vr7

Uncontrolled resource consumption in graphql

Priority MEDIUM 63

Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01454 Published 2023-09-20 Partial fix · 16.8.1 CWE-400
Open these records in search →