Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-26144
5.3
MEDIUMCVSS v3
Severity scale
010
Description
Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.
graphql
NPMA Query Language and Runtime which can target any service.
NPMA Query Language and Runtime which can target any service.>= 16.3.0, < 16.8.1, = 17.0.0NVD
@types/graphqlNPMStub TypeScript definitions entry for graphql, which provides its own types definitions
NPMStub TypeScript definitions entry for graphql, which provides its own types definitions>= 16.3.0, < 16.8.1, = 17.0.0NVD
GitHub
RubyGems
Crates.io
NuGet Gallery