Skip to content
OpenAdvisories

Product · webonyx

graphql-php

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-107376

    webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input

    webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can sub…

    webonyx graphql-php webonyx/graphql-php Packagist