GHSA-V62J-CXHH-FQ22 graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...

graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

com.graphql-java:graphql-java-extended-scalars (2021-06-29t01-19-32-8e19827) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2021-06-27t12-22-33-cd2bab76)

com.graphql-java:graphql-java MAVEN version 0.0.0-2021-06-27t12-22-33-cd2bab76 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-extended-scalars 2021-06-29t01-19-32-8e198...

cc.voox:graphql (0.9.2), cc.voox:graphql-spring-boot-starter (>=1.2.0-beta, <=1.2.1) +31 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (14.1)

com.graphql-java:graphql-java MAVEN version 14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql 0.9.2 - cc.voox:graphql-spring-boot-starter =1.2.0-beta, =1.2.1, =2.0.3, =7.1.0, =7.1....

com.atlassian:nadel (>=2022-01-19t23-18-30-adbad461, <=2022-02-09t22-25-15-f3130aff), com.atlassian:nadel-api (>=2022-01-19t23-18-30-adbad461, <=2022-02-09t22-25-15-f3130aff) +3 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2022-01-11t23-37-10-2d522ede)

com.graphql-java:graphql-java MAVEN version 0.0.0-2022-01-11t23-37-10-2d522ede is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2022-01-19t23-18-30-adbad461,...

com.graphql-java:graphql-java-servlet (4.3.0), com.graphql-java:graphql-java-tools (4.1.0) +2 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (4.1)

com.graphql-java:graphql-java MAVEN version 4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet 4.3.0 - com.graphql-java:graphql-java-tools 4.1.0 -...

cn.asany.chaos:jfantasy-graphql (>=2.8.5, <=2.8.7), com.arianegraphql:graphql-ktx (>=0.0.1, <=0.0.2) +252 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.2)

com.graphql-java:graphql-java MAVEN version 16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cn.asany.chaos:jfantasy-graphql =2.8.5, =0.0.1, =0.0.1, =0.0.1, =0.7.2, =0.7.2, =0.7.2, =0.7.2, =0.7.2...

io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

com.blazebit:blaze-persistence-distribution (>=1.5.0-alpha3, <=1.6.3), com.blazebit:blaze-persistence-examples-spring-data-graphql (>=1.4.0-alpha4, <=1.6.8) +24 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.2)

com.graphql-java:graphql-java MAVEN version 9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.blazebit:blaze-persistence-distribution =1.5.0-alpha3, =1.4.0-alpha4, =1.4.0-alpha4, =1.6.4, =1.6.4...

com.google.api.graphql:rejoiner (>=0.0.4, <=0.1.0), com.graphql-java:graphql-java-servlet (>=5.1.0, <=5.2.0) +5 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.0)

com.graphql-java:graphql-java MAVEN version 9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.google.api.graphql:rejoiner =0.0.4, =5.1.0, =4.3.0, =4.3.0, =1.5.9-2018-06-28t21-46-24, =1.3.4-1,...

com.graphql-java:graphql-java-servlet (>=5.0.0, <=5.0.1), com.graphql-java:graphql-java-tools (>=5.0.0, <=5.2.3) +51 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (8.0)

com.graphql-java:graphql-java MAVEN version 8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:graphql-java-servlet =5.0.0, =5.0.0, =4.1.0, =4.1.0, =1.5.18, =1.5.18, =1.5.13, =1.5.1...

com.coxautodev:graphql-java-client (>=0.0.1, <=0.0.2), com.coxautodev:graphql-java-tools (>=1.0.0, <=2.1.2) +17 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (2.3.0)

com.graphql-java:graphql-java MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.coxautodev:graphql-java-client =0.0.1, =1.0.0, =1.1.1, =1.1.1, =0.0.1-snapshot, =0.10.0, =1.2.7,...

com.atlassian:nadel (>=0.34803828716, <=0.35806358795) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2026-08-23t10-34-47-acc4678)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-08-23t10-34-47-acc4678 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =0.34803828716, =0.35806358795 Source cves:...

com.atlassian:nadel (>=0.23276497139, <=0.32110907999) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2026-03-18t00-52-57-e53ab1a)

com.graphql-java:graphql-java MAVEN version 0.0.0-2026-03-18t00-52-57-e53ab1a is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =0.23276497139, =0.32110907999 Source cves:...

com.distelli.graphql:graphql-apigen (5.0.0), com.distelli.graphql:graphql-apigen-deps (5.0.0) +54 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (12.0)

com.graphql-java:graphql-java MAVEN version 12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen 5.0.0 - com.distelli.graphql:graphql-apigen-deps 5.0.0 -...

com.graphql-java:java-dataloader (>=1.0.2, <=2.0.0-alpha1) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (4.0)

com.graphql-java:graphql-java MAVEN version 4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.graphql-java:java-dataloader =1.0.2, =2.0.0-alpha1 Source cves: CVE-2022-37734 Source advisory:...

cc.voox:graphql (>=0.1.0, <=0.2.1), com.arangodb:arangodb-graphql (>=1.0, <=1.2) +74 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (11.0)

com.graphql-java:graphql-java MAVEN version 11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.1.0, =1.0, =1.0, =1.0, =6.0.4, =untagged-d71cea9a82400b42eea3, =0.19.0, =5.6.0,...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

com.atlassian:nadel (>=2024-05-17t01-30-09-d2f4d77e, <=2024-06-29t00-47-14-0d1d3cff) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (0.0.0-2024-04-30t01-25-21-2f5ff3c)

com.graphql-java:graphql-java MAVEN version 0.0.0-2024-04-30t01-25-21-2f5ff3c is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.atlassian:nadel =2024-05-17t01-30-09-d2f4d77e,...