cc.voox:graphql (>=0.1.0, <=0.2.1), com.arangodb:arangodb-graphql (>=1.0, <=1.2) +74 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (11.0)

com.graphql-java:graphql-java MAVEN version 11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.1.0, =1.0, =1.0, =1.0, =6.0.4, =untagged-d71cea9a82400b42eea3, =0.19.0, =5.6.0,...

cc.voox:graphql (>=0.3.0, <=0.9.1), cc.voox:graphql-spring-boot-starter (>=1.0.0, <=1.1.0) +145 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (14.0)

com.graphql-java:graphql-java MAVEN version 14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.3.0, =1.0.0, =1.3.0, =1.1.0, =0.1.0, =1.9.0-alpha1, =1.9.0-alpha1, =1.9.0-alpha1,...

cc.voox:graphql (0.9.2), cc.voox:graphql-spring-boot-starter (>=1.2.0-beta, <=1.2.1) +31 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (14.1)

com.graphql-java:graphql-java MAVEN version 14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql 0.9.2 - cc.voox:graphql-spring-boot-starter =1.2.0-beta, =1.2.1, =2.0.3, =7.1.0, =7.1....

com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugin (>=0.4.0, <=0.7.1), com.auritylab.graphql-kotlin-toolkit:codegen (>=0.4.0, <=0.7.1) +283 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (15.0)

com.graphql-java:graphql-java MAVEN version 15.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugi...

com.apollographql.federation:federation-graphql-java-support (>=0.6.3-rc1, <=0.6.5), com.apollographql.federation:federation-spring-example (>=0.6.3-rc1, <=0.6.5) +79 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.1)

com.graphql-java:graphql-java MAVEN version 16.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.apollographql.federation:federation-graphql-java-support =0.6.3-rc1, =0.6.3-rc1, =3.0.0-rc1,...

cn.asany.chaos:jfantasy-graphql (>=2.8.5, <=2.8.7), com.arianegraphql:graphql-ktx (>=0.0.1, <=0.0.2) +252 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.2)

com.graphql-java:graphql-java MAVEN version 16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cn.asany.chaos:jfantasy-graphql =2.8.5, =0.0.1, =0.0.1, =0.0.1, =0.7.2, =0.7.2, =0.7.2, =0.7.2, =0.7.2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +245 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=17.0-beta1, <=17.3)

com.graphql-java:graphql-java MAVEN version =17.0-beta1, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.7.0, =0.7.0, =0.0.3, =0.0.3, =0.0.3, =1.6.9, =1.6.20 and more Source cves: CVE-2022-37734 Source advisory: GHSA-V62J-CXHH-FQ22...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

com.graphql-java:graphql-java-servlet (>=4.6.0, <=4.7.0), com.graphql-java:graphql-java-tools (>=4.2.0, <=4.3.0) +21 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (6.0)

com.graphql-java:graphql-java MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.6.0, =4.2.0, =3.10.0, =3.10.0, =0.3.1, =0.3.1, =0.3.1, =1.5.7,...

dev.feddi:feddi-api-usage-client (>=2026-05-15-1133, <=2026-06-20-2000), dev.feddi:feddi-gateway-extension (>=2026-09-19-1518, <=2026-10-13-1539) +1 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2026-05-12t01-33-43-16153d0)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-05-12t01-33-43-16153d0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - dev.feddi:feddi-api-usage-client =2026-05-15-1133, =2026-09-19-1518,...

graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...

GHSA-V62J-CXHH-FQ22 graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...

com.atlassian:nadel (>=2022-03-01t01-46-13-f56480cc, <=2022-03-02t01-26-59-bc167912), com.atlassian:nadel-api (>=2022-03-01t01-46-13-f56480cc, <=2022-03-02t01-26-59-bc167912) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-02-28t04-15-47-83c97ebe)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-02-28t04-15-47-83c97ebe is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-03-01t01-46-13-f56480cc,...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

com.atlassian:nadel (>=2022-05-05t23-28-03-e7377aac, <=2022-05-09t00-52-34-43dea327) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-05-05t06-09-38-a3a13d8e)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-05-05t06-09-38-a3a13d8e is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-05-05t23-28-03-e7377aac,...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +245 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=17.0-beta1, <=17.3)

com.graphql-java:graphql-java MAVEN version =17.0-beta1, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.7.0, =0.7.0, =0.0.3, =0.0.3, =0.0.3, =1.6.9, =1.6.20 and more Source cves: CVE-2022-37734 Source advisory: OSV:GHSA-V62J-CXHH-FQ22...

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...