vektah github.com/vektah/gqlparser/v2 vulnerabilities

Latest vektah github.com/vektah/gqlparser/v2 CVEs

Newest publication first

1. CVE-2023-49559 gqlparser denial of service vulnerability via the parserDirectives function

   Published 2024-06-12

   Low·CVSS 3.7 EPSS 0.60%

   An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.