Skip to content
OpenAdvisories

Package · crates.io

juniper_warp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-fj3h-2jc3-973v

    Unbounded memory use on large request bodies

    The `make_graphql_filter()` and `make_graphql_filter_sync()` filters of `juniper_warp` read the whole body of a POST request into memory before they parsed the body. The filters had no limit on the size of the body. A client could thus send a large body and e…

    juniper_warp crates.io