ai.stapi:graphql-api (>=0.0.11, <=0.2.3), be.ugent.solidlab:shapeshift (0.0.1) +290 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (>=20.0, <=20.8)

com.graphql-java:graphql-java MAVEN version =20.0, =0.0.11, =3.0.0, =1.6.9, =1.6.9, =1.6.9, =2.0.3, =6.2.0, =6.5.0, =7.0.0-alpha.6 and more Source cves: CVE-2024-40094 Source advisory: OSV:GHSA-H9MQ-F6Q5-6C8M...

com.github.manosbatsis.kmm.converters:kmm-converters-elide-starter (1.0.0-alpha.2), com.github.manosbatsis.kmp.converters:kmp-converters-elide-starter (>=1.0.0-alpha.3, <=1.0.0-alpha.8) +87 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.3)

com.graphql-java:graphql-java MAVEN version 18.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.github.manosbatsis.kmm.converters:kmm-converters-elide-starter 1.0.0-alpha.2 -...

com.expediagroup:graphql-kotlin-automatic-persisted-queries (>=6.0.0-alpha.6, <=6.0.0), com.expediagroup:graphql-kotlin-client-generator (>=6.0.0-alpha.1, <=6.0.0) +107 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (18.0)

com.graphql-java:graphql-java MAVEN version 18.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.expediagroup:graphql-kotlin-automatic-persisted-queries =6.0.0-alpha.6, =6.0.0-alpha.1,...

com.intuit.graphql:graphql-orchestrator-java (>=5.0.23, <=5.0.29), io.helidon.graphql:helidon-graphql-server (>=2.6.1, <=4.0.0-alpha6) +3 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (17.5)

com.graphql-java:graphql-java MAVEN version 17.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.intuit.graphql:graphql-orchestrator-java =5.0.23, =2.6.1, =2.6.1, =4.0.0-alpha6 -...

com.atlassian:nadel (>=2022-04-13t01-44-07-9478f8ae, <=2022-05-05t01-56-52-3dbe727f) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2022-04-13t00-55-03-2148cdf3)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-04-13t00-55-03-2148cdf3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-04-13t01-44-07-9478f8ae,...

com.atlassian:nadel (>=2022-03-01t01-46-13-f56480cc, <=2022-03-02t01-26-59-bc167912), com.atlassian:nadel-api (>=2022-03-01t01-46-13-f56480cc, <=2022-03-02t01-26-59-bc167912) +3 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2022-02-28t04-15-47-83c97ebe)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-02-28t04-15-47-83c97ebe is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-03-01t01-46-13-f56480cc,...

GHSA-H9MQ-F6Q5-6C8M GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service

GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENFs as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions...

cn.asany.chaos:jfantasy-graphql (>=2.8.5, <=2.8.7), com.arianegraphql:graphql-ktx (>=0.0.1, <=0.0.2) +252 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (16.2)

com.graphql-java:graphql-java MAVEN version 16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cn.asany.chaos:jfantasy-graphql =2.8.5, =0.0.1, =0.0.1, =0.0.1, =0.7.2, =0.7.2, =0.7.2, =0.7.2, =0.7.2...

io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

com.blazebit:blaze-persistence-examples-microprofile-graphql (>=1.6.2, <=1.6.8), com.codingfeline.kgql:compiler (>=0.7.0, <=0.8.2) +44 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (17.0)

com.graphql-java:graphql-java MAVEN version 17.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.blazebit:blaze-persistence-examples-microprofile-graphql =1.6.2, =0.7.0, =17.0, =17.0, =2.2.0.cr1,...

org.apache.skywalking:graphql-16plus-plugin (>=8.10.0, <=9.6.0), org.craftercms:crafter-engine (>=3.1.25, <=3.1.29e) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (16.0)

com.graphql-java:graphql-java MAVEN version 16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - org.apache.skywalking:graphql-16plus-plugin =8.10.0, =3.1.25, =3.1.29e Source cves: CVE-2024-40094...

cc.voox:graphql (0.9.2), cc.voox:graphql-spring-boot-starter (>=1.2.0-beta, <=1.2.1) +31 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (14.1)

com.graphql-java:graphql-java MAVEN version 14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql 0.9.2 - cc.voox:graphql-spring-boot-starter =1.2.0-beta, =1.2.1, =2.0.3, =7.1.0, =7.1....

cc.voox:graphql (>=0.3.0, <=0.9.1), cc.voox:graphql-spring-boot-starter (>=1.0.0, <=1.1.0) +145 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (14.0)

com.graphql-java:graphql-java MAVEN version 14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.3.0, =1.0.0, =1.3.0, =1.1.0, =0.1.0, =1.9.0-alpha1, =1.9.0-alpha1, =1.9.0-alpha1,...

com.introproventures:graphql-jpa-query-boot-starter (>=0.3.8, <=0.3.9), com.introproventures:graphql-jpa-query-example (>=0.3.8, <=0.3.9) +1 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (9.4)

com.graphql-java:graphql-java MAVEN version 9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.introproventures:graphql-jpa-query-boot-starter =0.3.8, =0.3.8, =0.3.8, =0.3.9 Source cves:...

dev.feddi:feddi-api-usage-client (>=2026-05-15-1133, <=2026-06-20-2000), dev.feddi:feddi-gateway-extension (>=2026-09-19-1518, <=2026-10-13-1539) +1 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2026-05-12t01-33-43-16153d0)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-05-12t01-33-43-16153d0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - dev.feddi:feddi-api-usage-client =2026-05-15-1133, =2026-09-19-1518,...

com.atlassian:nadel (>=0.23276497139, <=0.32110907999) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2026-03-18t00-52-57-e53ab1a)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-03-18t00-52-57-e53ab1a is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =0.23276497139, =0.32110907999 Source cves:...

com.atlassian:nadel (>=2024-09-10t04-17-05-d9bb3cf1, <=2025-01-08t00-12-43-0a5d2839) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2024-09-03t03-36-42-d6dbf61)

com.graphql-java:graphql-java MAVEN version 0.0.0-2024-09-03t03-36-42-d6dbf61 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2024-09-10t04-17-05-d9bb3cf1,...

com.atlassian:nadel (>=2024-04-24t00-23-23-bc0bf347, <=2024-05-14t06-33-26-da580917) potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (0.0.0-2024-04-11t03-38-06-0dee00c)

com.graphql-java:graphql-java MAVEN version 0.0.0-2024-04-11t03-38-06-0dee00c is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2024-04-24t00-23-23-bc0bf347,...

com.graphql-java:graphql-java-servlet (>=4.4.0, <=4.5.0), com.graphql-java:graphql-java-tools (>=4.1.1, <=4.1.2) +9 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (4.2)

com.graphql-java:graphql-java MAVEN version 4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =4.4.0, =4.1.1, =3.9.0, =3.9.0, =1.5.0, =1.1.6-2017-09-24t06-21-2...