Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: absinthe-graphql Clear all filters
TI-2026-31013 CVE-2026-42793 · GHSA-qf4g-9fqq-mmm7

Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe

Priority LOW 37

Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00613 Published 2026-05-08 Fixed in 1.10.2 CWE-770
TI-2026-31014 CVE-2026-42794 · GHSA-c62g-j346-39v5

Reflected XSS via backslash bypass in GraphiQL js_escape in absinthe_plug

Priority MEDIUM 45

Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in absinthe-graphql absinthe_plug allows reflected cross-site scripting via the GraphiQL interface.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00282 Published 2026-05-08 Fixed in 1.5.10 CWE-79