activecube-rs (>=0.0.1, <=0.1.30), async-graphql-actix-web (>=7.0.0, <=7.0.3) +27 more potentially affected by CVE-2024-47614 via async-graphql (7.0.3)

async-graphql CARGO version 7.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on async-graphql and may be impacted: - activecube-rs =0.0.1, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =0.1.0, =0.1.0, =0.10.0, =0.11.0 and more Source cves: CVE-2024-47614 Source...

CVE-2024-47614 async-graphql vulnerable to Directive Overload

async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10...