CVE-2026-75507

A flaw was found in GraphQL-core. An unauthenticated remote attacker could cause a Denial of Service DoS by submitting a specially crafted query with nested inline fragments. During query validation, repeated field comparisons consume excessive CPU resources before complexity limits can be...