Skip to content
OpenAdvisories

Package · RubyGems

graphql

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-3h96-34p3-xm76

    GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

    GraphQL-Ruby's `max_query_string_tokens` configuration didn't count comment tokens against the limit, allowing strings to be processed even after the configured maximum had actually been reached. In patched versions, the Ruby lexer does count these tokens. Gr…

    graphql RubyGems