io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

com.atlassian:nadel (>=0.15431504173, <=2025-06-04t01-38-48-82a5d0fc) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2024-11-28t03-45-06-a3fcfcb)

com.graphql-java:graphql-java MAVEN version 0.0.0-2024-11-28t03-45-06-a3fcfcb is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =0.15431504173, =2025-06-04t01-38-48-82a5d0fc Source...

com.atlassian:nadel (>=2022-06-20t01-05-08-028f1075, <=2022-08-17t01-51-20-e01ac6d0) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-06-20t00-12-01-bfcc5d95)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-06-20t00-12-01-bfcc5d95 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-06-20t01-05-08-028f1075,...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

com.distelli.graphql:graphql-apigen (>=3.0.0, <=4.0.0), com.distelli.graphql:graphql-apigen-deps (>=3.0.0, <=4.0.0) +12 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (3.0.0)

com.graphql-java:graphql-java MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen =3.0.0, =3.0.0, =3.0.2-alpha4, =4.0.0, =2.3.0, =3.3.0, =3.3.0,...

com.graphql-java:java-dataloader (>=1.0.2, <=2.0.0-alpha1) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (4.0)

com.graphql-java:graphql-java MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:java-dataloader =1.0.2, =2.0.0-alpha1 Source cves: CVE-2022-37734 Source advisory:...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

com.atlassian:nadel (>=2022-03-03t00-44-02-3451c485, <=2022-04-12t23-25-02-db4f6da9), com.atlassian:nadel-api (>=2022-03-03t13-36-24-9b3db244, <=2022-03-22t05-05-01-a5d0b804) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-03-01t04-16-14-e973c9a1)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-03-01t04-16-14-e973c9a1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-03-03t00-44-02-3451c485,...

com.atlassian:nadel (>=2022-01-19t23-18-30-adbad461, <=2022-02-09t22-25-15-f3130aff), com.atlassian:nadel-api (>=2022-01-19t23-18-30-adbad461, <=2022-02-09t22-25-15-f3130aff) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-01-11t23-37-10-2d522ede)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-01-11t23-37-10-2d522ede is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-01-19t23-18-30-adbad461,...

cn.asany.chaos:jfantasy-graphql (>=2.8.5, <=2.8.7), com.arianegraphql:graphql-ktx (>=0.0.1, <=0.0.2) +252 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.2)

com.graphql-java:graphql-java MAVEN version 16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cn.asany.chaos:jfantasy-graphql =2.8.5, =0.0.1, =0.0.1, =0.0.1, =0.7.2, =0.7.2, =0.7.2, =0.7.2, =0.7.2...

com.atlassian:nadel (>=0.21161324682, <=0.23219532328) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2026-01-20t01-18-55-e5f21b8)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-01-20t01-18-55-e5f21b8 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =0.21161324682, =0.23219532328 Source cves:...

com.atlassian:nadel (>=2022-02-24t04-55-10-ea5df0db, <=2022-02-25t06-09-28-d25638d2), com.atlassian:nadel-api (>=2022-02-24t04-55-10-ea5df0db, <=2022-02-25t06-09-28-d25638d2) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-02-23t01-12-39-39fa5820)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-02-23t01-12-39-39fa5820 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-02-24t04-55-10-ea5df0db,...

com.atlassian:nadel (>=2022-02-09t22-56-28-545a7ac7, <=2022-02-24t02-45-29-add3d07c), com.atlassian:nadel-api (>=2022-02-09t22-56-28-545a7ac7, <=2022-02-24t02-45-29-add3d07c) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-02-07t22-39-39-39451d5e)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-02-07t22-39-39-39451d5e is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-02-09t22-56-28-545a7ac7,...

com.google.api.graphql:rejoiner (>=0.0.4, <=0.1.0), com.graphql-java:graphql-java-servlet (>=5.1.0, <=5.2.0) +5 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.0)

com.graphql-java:graphql-java MAVEN version 9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.google.api.graphql:rejoiner =0.0.4, =5.1.0, =4.3.0, =4.3.0, =1.5.9-2018-06-28t21-46-24, =1.3.4-1,...

GHSA-V62J-CXHH-FQ22 graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...

com.atlassian:nadel (>=2022-08-23t04-05-49-08423513, <=2022-09-20t23-56-29-c4ac1bf8) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-08-22t23-28-51-f5b123fb)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-08-22t23-28-51-f5b123fb is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-08-23t04-05-49-08423513,...

com.graphql-java:graphql-java-servlet (4.3.0), com.graphql-java:graphql-java-tools (4.1.0) +2 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (4.1)

com.graphql-java:graphql-java MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet 4.3.0 - com.graphql-java:graphql-java-tools 4.1.0 -...

com.graphql-java:graphql-java-servlet (>=4.6.0, <=4.7.0), com.graphql-java:graphql-java-tools (>=4.2.0, <=4.3.0) +21 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (6.0)

com.graphql-java:graphql-java MAVEN version 6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.6.0, =4.2.0, =3.10.0, =3.10.0, =0.3.1, =0.3.1, =0.3.1, =1.5.7,...

com.bretpatterson:schemagen-graphql (>=0.5.2, <=1.0.0-rc3), com.bretpatterson:schemagen-graphql-examples (>=0.5.2, <=1.0.0-rc3) +11 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (2.0.0)

com.graphql-java:graphql-java MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.bretpatterson:schemagen-graphql =0.5.2, =0.5.2, =0.5.2, =0.5.2, =0.7.0, =0.6.3, =0.1, =0.1, =0.1,...

com.atlassian:nadel (>=2024-03-25t09-04-54-342addeb, <=2024-04-17t02-36-54-81f33840) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2024-03-22t23-18-46-1eb245d)

com.graphql-java:graphql-java MAVEN version 0.0.0-2024-03-22t23-18-46-1eb245d is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2024-03-25t09-04-54-342addeb,...