Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2025/04/01 3:15 p.m.12 views

graphql-ruby: Remote code execution when loading a crafted GraphQL schema

A flaw was found in graphql-ruby. In affected versions of graphq-ruby, loading a malicious schema definition in the GraphQL::Schema.fromintrospection or the GraphQL::Schema::Loader.load can cause remote code execution. Any system that loads a schema by JSON from an untrusted source is vulnerable,...

9CVSS6.1AI score0.0305EPSS
SaveExploits2References13
Rows per page
Query Builder