CVE-2022-31173 Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually...

CVE-2022-31173

CVE-2022-31173 affects the Juniper GraphQL server library for Rust. Affected versions are vulnerable to uncontrolled recursion, causing a program crash (denial of service). The issue is addressed in version 0.15.10; users should upgrade. If upgrading is not possible, a manual limit on recursion d...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:GHSA-4RX6-G5VG-5F3J...

CVE-2022-31173

creationtimestamp| type| source ---|---|--- 2022-07-28 14:24:43+00:00| published-proof-of-concept| https://github.com/graphql-rust/juniper/security/advisories/GHSA-4rx6-g5vg-5f3j 2022-08-01 22:17:01+00:00| seen| https://t.me/cibsecurity/47366...

automaat-processor-git-clone (0.1.0), automaat-processor-http-request (0.1.0) +50 more potentially affected by CVE-2022-31173 via juniper (>=0.7.0, <=0.15.8)

juniper CARGO version =0.7.0, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-1, =0.3.0-development-2 and more Source cves: CVE-2022-31173 Source advisory: OSV:RUSTSEC-2022-0038...