Design/Logic Flaw

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +832 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=0.0.0-2021-06-27t12-22-33-cd2bab76, <=17.3)

com.graphql-java:graphql-java MAVEN version =0.0.0-2021-06-27t12-22-33-cd2bab76, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.1.0, =1.0.0, =2.8.5, =1.3.0, =1.1.0, =0.6.3-rc1, =2.0.1 and more Source cves: CVE-2022-37734 Source advisory: MEND:CVE-2022-37734...

CVE-2022-37734

CVE-2022-37734 is a documented Denial of Service in GraphQL Java. The vulnerability arises from an uncontrolled resource consumption flaw, exploitable by sending specially-crafted requests (Directive overloading). Affected graphs-java implementations listed in sources include the fix versions: 19...

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

CVE-2022-37734

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

GraphQL Java security vulnerabilities

GraphQL Java is GraphQL Java open source a GraphQL Java implementation . Query language and server-side runtime for application programming interfaces APIs. A security vulnerability exists in GraphQL Java versions prior to 19.0, which can be exploited by an attacker to send malicious GraphQL...

CVE-2022-37734: Undefined Security Weakness

graphql-java before19.0 is vulnerable to Denial of Service. An attacker can send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0 and later, 18.3, and 17.4, and 0.0.0-2022-07-26T05-45-04-226aabd9...

PT-2022-24054

Name of the Vulnerable Software and Affected Versions graphql-java versions prior to 19.0 graphql-java version 18.3 graphql-java version 17.4 Description The issue allows an attacker to send a malicious GraphQL query that consumes CPU resources, leading to a Denial of Service. This can be achieve...

Spring Tips: Learn Spring for GraphQL (the last two episodes: parts 7 and 8)

Hi, Spring fans! In thi^^^ these installments, we continue our series introducing the Spring for GraphQL project. This series features Spring for GraphQL lead Rossen Stoyanchev @rstoya05 - whose work you may know from basically everything in the wide and wonderful world of Springdom having to do...

A Bootiful Podcast: GraphQL Java founder Andi Marek

Hi, Spring fans! In this installment of a Bootiful Podcast, Josh Long @starbuxman talks to the GraphQL Java project founder and lead, Atlassian engineer, and Spring GraphQL cofounder Andi Marek @andimarek...