Skip to content

Product

crates.io juniper_hyper vulnerabilities

1 published CVE affecting crates.io juniper_hyper, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest crates.io juniper_hyper CVEs

Newest publication first

  1. RUSTSEC-2026-0415 Unbounded memory use on large request bodies

    Published
    HighCVSS 7.5

    The graphql() and graphql_sync() functions of juniper_hyper read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request n...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.