Skip to content
OpenAdvisories

Package · crates.io

async-graphql

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-47614

    async-graphql vulnerable to Directive Overload

    async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fi…

    async-graphql async-graphql async-graphql crates.io
  • High 7.5
    GHSA-xq3c-8gqm-v648

    async-graphql / async-graphql - @DOS GraphQL Nested Fragments overflow

    ### Impact Executing deeply nested queries may cause stack overflow. ### Patches Upgrade to `v4.0.6`

    async-graphql crates.io