PT-2026-132761

The graphql and graphql sync functions of juniper hyper read the whole body of a POST request into memory before they parsed the body. The functions had no limit on the size of the body. A client could thus send a large body and exhaust the memory of the server. The request needs no authenticatio...