Description
graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.graphql-java:graphql-java | < 17.4 | 17.4 | GHSA-v62j-cxhh-fq22 |
| Maven | com.graphql-java:graphql-java | >= 18.0, < 18.3 | 18.3 | GHSA-v62j-cxhh-fq22 |
Advisories 2
- WID-SEC-2022-1635 Red Hat OpenShift und Red Hat Enterprise Linux: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 27, 2025
- WID-SEC-2023-1403 IBM Maximo Asset Management: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 8, 2023