Skip to content
OpenAdvisories

Package · Hex

absinthe

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.2
    CVE-2026-42793

    Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe

    Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL. Multiple Blueprint.Draft.convert/2 implementations…

    absinthe-graphql absinthe absinthe Hex
  • High 8.7
    CVE-2026-43967

    Quadratic fragment-name uniqueness check causes denial of service in absinthe

    Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Document.Validation.UniqueFragmentNames':run/2 iterates over all f…

    absinthe-graphql absinthe absinthe Hex