Skip to content

Product

debian/ruby-graphql vulnerabilities

2 published CVES affecting debian/ruby-graphql, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
1
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest debian/ruby-graphql CVEs

Newest publication first

  2. CVE-2025-27407 Remote code execution when loading a crafted GraphQL schema

    Published
    CriticalCVSS 9.1 EPSS 3.1% PoC

    graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in GraphQL::Schema.from_introspection (or GraphQL::Schema::Loader.load) can resul...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.