2 results · Feed
-
High 7.5
graphql-go has infinite recursion in the type definition parser
graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.
-
Medium 6.5
Denial of Service in graphql-go
graphql-go is a GraphQL server with a focus on ease of use. In versions prior to 1.3.0 there exists a DoS vulnerability that is possible due to a bug in the library that would allow an attacker with specifically designed queries to cause stack overflow panics…