com.graphql-java-generator.graphql-gradle-plugin:com.graphql-java-generator.graphql-gradle-plugin.gradle.plugin (>=2.0rc1, <=2.0), com.graphql-java-generator:graphql-gradle-plugin (>=2.0rc1, <=2.0) +19 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.4)

com.graphql-java:graphql-java MAVEN version 18.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: -...

br.com.m4rc310:br-com-m4rc310-graphql (1.0.1), br.com.m4rc310:br-com-m4rc310-libs (1.0.1) +58 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.5)

com.graphql-java:graphql-java MAVEN version 18.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - br.com.m4rc310:br-com-m4rc310-graphql 1.0.1 - br.com.m4rc310:br-com-m4rc310-libs 1.0.1 -...

io.helidon.graphql:helidon-graphql-server (>=2.6.2, <=4.0.12), io.helidon.microprofile.graphql:helidon-microprofile-graphql-server (>=2.6.2, <=4.0.12) +3 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.6)

com.graphql-java:graphql-java MAVEN version 18.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.helidon.graphql:helidon-graphql-server =2.6.2, =2.6.2, =4.0.0-m2, =4.0.9, =4.0.12 Source cves:...

org.noear:graphql-solon-plugin (>=2.8.1-m4, <=4.1.1) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.7)

com.graphql-java:graphql-java MAVEN version 18.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - org.noear:graphql-solon-plugin =2.8.1-m4, =4.1.1 Source cves: CVE-2024-40094 Source advisory:...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.6.2) +343 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=19.0, <=19.8)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =1.6.9, =14.3.0, =17.7.0 - com.datasqrl:sqrl-base 0.6.0 and more Source cves: CVE-2024-40094 Source advisory: OSV:GHSA-H9MQ-F6Q5-6C8M...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.4.0, <=6.6.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.4.0, <=6.6.2) +343 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=19.0, <=19.8)

com.graphql-java:graphql-java MAVEN version =19.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =6.4.0, =2.0.4, =1.6.9, =14.3.0, =17.7.0 - com.datasqrl:sqrl-base 0.6.0 and more Source cves: CVE-2024-40094 Source advisory: GHSA-H9MQ-F6Q5-6C8M...

ai.stapi:graphql-api (>=0.0.11, <=0.2.3), be.ugent.solidlab:shapeshift (0.0.1) +290 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=20.0, <=20.8)

com.graphql-java:graphql-java MAVEN version =20.0, =0.0.11, =3.0.0, =1.6.9, =1.6.9, =1.6.9, =2.0.3, =6.2.0, =6.5.0, =7.0.0-alpha.6 and more Source cves: CVE-2024-40094 Source advisory: OSV:GHSA-H9MQ-F6Q5-6C8M...

ai.stapi:graphql-api (>=0.0.11, <=0.2.3), be.ugent.solidlab:shapeshift (0.0.1) +290 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=20.0, <=20.8)

com.graphql-java:graphql-java MAVEN version =20.0, =0.0.11, =3.0.0, =1.6.9, =1.6.9, =1.6.9, =2.0.3, =6.2.0, =6.5.0, =7.0.0-alpha.6 and more Source cves: CVE-2024-40094 Source advisory: GHSA-H9MQ-F6Q5-6C8M...

br.com.m4rc310:br-com-m4rc310-cups (1.0.16), br.com.m4rc310:br-com-m4rc310-gql (>=v1.0.26, <=1.0.41) +370 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=21.0, <=21.4)

com.graphql-java:graphql-java MAVEN version =21.0, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =6.8.0, =7.2.3 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-uhnfhirtest 6.8.0 and more Source cves: CVE-2024-40094 Source advisory:...

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

CVE-2024-40094

The graphql-java library (prior to versions 21.5 , 20.9 , and 19.11 ) contains a vulnerability where it fails to properly account for ExecutableNormalizedFields (ENFs) when preventing denial of service via introspection queries . An attacker can exploit this by sending deeply nested alias-based i...

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

CVE-2024-40094: Undefined Security Weakness

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

ai.stapi:graphql-api (>=0.0.11, <=0.2.3), be.ugent.solidlab:shapeshift (0.0.1) +290 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=20.0, <=20.8)

com.graphql-java:graphql-java MAVEN version =20.0, =0.0.11, =3.0.0, =1.6.9, =1.6.9, =1.6.9, =2.0.3, =6.2.0, =6.5.0, =7.0.0-alpha.6 and more Source cves: CVE-2024-40094 Source advisory: MEND:CVE-2024-40094...

CVE-2024-40094

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

GraphQL Java security vulnerabilities

GraphQL Java is a GraphQL Java implementation of the GraphQL Java open source. Query language and server-side runtime for application programming interfaces APIs. A security vulnerability exists in GraphQL Java versions prior to 21.5 that stems from not properly considering...

PT-2024-28780

Name of the Vulnerable Software and Affected Versions GraphQL Java versions prior to 21.5 GraphQL Java version 20.9 GraphQL Java version 19.11 Description The issue is related to the improper consideration of ExecutableNormalizedFields ENFs in preventing denial of service via introspection querie...

How Can Deliberately Flawed APIs Help In Mastering API Security?

In our recent webinar recent webinar title 'A CISO’s Checklist for Securing APIs and Applications', we delved into the concept of creating an API security playground tailored for both developer and security teams. The core idea revolves around utilizing intentionally vulnerable APIs as training...