Skip to content
OpenAdvisories

Package · crates.io

juniper_hyper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-pfrg-qg4f-grmv

    Unbounded memory use on large request bodies

    The `graphql()` and `graphql_sync()` functions of `juniper_hyper` read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory o…

    juniper_hyper crates.io