edu.gemini vulnerabilities

Products

• edu.gemini/gsp-graphql-core_2.13 1
• edu.gemini/gsp-graphql-core_3 1
• edu.gemini/gsp-graphql-core_native0.4_2.13 1
• edu.gemini/gsp-graphql-core_native0.4_3 1
• edu.gemini/gsp-graphql-core_sjs1_2.13 1
• edu.gemini/gsp-graphql-core_sjs1_3 1

Latest edu.gemini CVEs

Newest publication first

1. CVE-2023-50730 Grackle has StackOverflowError in GraphQL query processing

   Published 2023-12-22

   High·CVSS 7.5 EPSS 0.83%

   Grackle is a GraphQL server written in functional Scala, built on the Typelevel stack. The GraphQL specification requires that GraphQL fragments must not form cycles, either directly or indirectly. Prior to Grackle version 0.18.0, that requirement wasn't checked, and queries with...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.