Read the docs
TI-2026-79313 Aliases CVE-2026-75507GHSA-vj8h-fx38-h3vc

Denial of service in GraphQL-core OverlappingFieldsCanBeMerged rule

Priority MEDIUM 40CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

GraphQL-core, a Python port of GraphQL.js, is affected from 3.0.0 before 3.2.12 and from 3.3.0a1 before 3.3.0rc1. The OverlappingFieldsCanBeMerged validation rule repeatedly compares fields that share response names and re-compares flattened inline fragments, causing quadratic and worst-case O(n²·m²) CPU work (CWE-407). An unauthenticated remote attacker can pin a worker process with a crafted query and saturate a multi-worker service, because this work runs before resolver-level depth or complexity controls.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation phase. The prior named-fragment memoization does not cover this path, so nested repeated inline fragments can drive quadratic and worst-case O(n²·m²) CPU work before any resolver or AST-based depth or complexity control runs. An unauthenticated remote attacker can submit a shallow, highly compressible GraphQL query that pins a worker process and can saturate a multi-worker service. This issue is fixed in versions 3.2.12 and 3.3.0rc1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.006 48th percentileScored 2026-11-07
Fix Partial graphql-core (graphql-python): 3.2.12, 3.3.0rc1graphql-core (PyPI): 3.2.12, 3.3.0rc1Red Hat: 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
graphql-pythongraphql-core3.0.0 to before 3.2.12; 3.3.0a1 to before 3.3.0rc13.2.12, 3.3.0rc1Patch availableCNA
—graphql-core (PyPI)3.0.0 to before 3.2.123.2.12Patch availableGHSA-vj8h-fx38-h3vc
—graphql-core (PyPI)3.3.0a1 to before 3.3.0rc13.3.0rc1Patch availableGHSA-vj8h-fx38-h3vc
  • graphql-core Vendorgraphql-python Affected 3.0.0 to before 3.2.12; 3.3.0a1 to before 3.3.0rc1 Fixed in 3.2.12, 3.3.0rc1 Patch available CNA
  • graphql-core (PyPI) Vendor— Affected 3.0.0 to before 3.2.12 Fixed in 3.2.12 Patch available GHSA-vj8h-fx38-h3vc
  • graphql-core (PyPI) Vendor— Affected 3.3.0a1 to before 3.3.0rc1 Fixed in 3.3.0rc1 Patch available GHSA-vj8h-fx38-h3vc

Remediation

Upgrade graphql-core to 3.2.12 if you run a version from 3.0.0 before 3.2.12, or to 3.3.0rc1 if you run a version from 3.3.0a1 before 3.3.0rc1. Red Hat lists Exploit Intelligence and Red Hat OpenShift AI (RHOAI) as affected without a fix, with no plan available for either.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA graphql-core (graphql-python) Fixed in 3.2.12, 3.3.0rc1
  • Fix · GHSA-vj8h-fx38-h3vc graphql-core (PyPI) Fixed in 3.2.12 Advisory →
  • Fix · GHSA-vj8h-fx38-h3vc graphql-core (PyPI) Fixed in 3.3.0rc1 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Exploit IntelligenceAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Not affected: 1 product
  • Red Hat OpenShift AI (RHOAI)

Timeline

  1. 2026-10-22 Threatist record created from CVE-2026-75507
  2. 2026-10-22 Alias added: GHSA-vj8h-fx38-h3vc
  3. 2026-10-22 Fix available: PyPI/[email protected], PyPI/[email protected] · GHSA-vj8h-fx38-h3vc
  4. 2026-10-22 CVSS score added · GHSA-vj8h-fx38-h3vc
  5. 2026-10-22 Weakness changed · GHSA-vj8h-fx38-h3vc
  6. 2026-10-22 6 new references · GHSA-vj8h-fx38-h3vc
  7. 2026-10-23 Affected versions changed · Red Hat
  8. 2026-10-23 CVSS score added · Red Hat
  9. 2026-10-23 Priority changed: MEDIUM → LOW
  10. 2026-10-23 CISA SSVC decision points changed
  11. 2026-10-24 Priority changed: LOW → MEDIUM
  12. 2026-11-06 Affected versions changed · Red Hat

References

Other 6

  • TI-2026-79314 Comment tokens bypass max_tokens limit in graphql-core parser CVSS 3.1HIGH 7.5
  • TI-2026-82783 GraphQL-core: Denial of service via memory leak in aborted validations CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences