Vulnerabilities

TI-2026-31013 CVE-2026-42793 · GHSA-qf4g-9fqq-mmm7

Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe

LOW 37

Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00613 Published 2026-05-08 Fixed in 1.10.2 CWE-770

TI-2026-32012 CVE-2026-43967 · GHSA-9mhv-8h52-q7q2

Quadratic fragment-name uniqueness check causes denial of service in absinthe

MEDIUM 45

Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00624 Published 2026-05-08 Fixed in 1.10.2 CWE-407

Vulnerabilities

Filters

Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe

Quadratic fragment-name uniqueness check causes denial of service in absinthe