com.google.api.graphql:rejoiner (>=0.0.4, <=0.1.0), com.graphql-java:graphql-java-servlet (>=5.1.0, <=5.2.0) +5 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.0)

com.graphql-java:graphql-java MAVEN version 9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.google.api.graphql:rejoiner =0.0.4, =5.1.0, =4.3.0, =4.3.0, =1.5.9-2018-06-28t21-46-24, =1.3.4-1,...

com.blazebit:blaze-persistence-distribution (>=1.5.0-alpha3, <=1.6.3), com.blazebit:blaze-persistence-examples-spring-data-graphql (>=1.4.0-alpha4, <=1.6.8) +24 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.2)

com.graphql-java:graphql-java MAVEN version 9.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.blazebit:blaze-persistence-distribution =1.5.0-alpha3, =1.4.0-alpha4, =1.4.0-alpha4, =1.6.4, =1.6.4...

io.gitee.johnpeng:mx-dal-elastic (4.1.0), io.gitee.johnpeng:mx-service-utils (>=3.0.3, <=3.0.7) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.3)

com.graphql-java:graphql-java MAVEN version 9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic 4.1.0 - io.gitee.johnpeng:mx-service-utils =3.0.3, =3.0.7 Source cves:...

com.introproventures:graphql-jpa-query-boot-starter (>=0.3.8, <=0.3.9), com.introproventures:graphql-jpa-query-example (>=0.3.8, <=0.3.9) +1 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.4)

com.graphql-java:graphql-java MAVEN version 9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.introproventures:graphql-jpa-query-boot-starter =0.3.8, =0.3.8, =0.3.8, =0.3.9 Source cves:...

io.gitee.johnpeng:mx-dal-elastic (>=4.1.1, <=5.2.1), io.gitee.johnpeng:mx-dal-hibernate (>=5.0.0, <=5.2.4) +6 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (9.7)

com.graphql-java:graphql-java MAVEN version 9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - io.gitee.johnpeng:mx-dal-elastic =4.1.1, =5.0.0, =5.1.0, =2.0.1, =1.0.0, =3.0.7-patch1, =5.3.10 -...

com.expedia.www:graphql-kotlin (>=development, <=0.0.25), com.google.api.graphql:rejoiner (0.1.1) +10 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (10.0)

com.graphql-java:graphql-java MAVEN version 10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.expedia.www:graphql-kotlin =development, =6.1.4, =5.3.3, =5.0.3, =5.0.3, =5.0.4, =5.0.4, =1.0-rc1,...

cc.voox:graphql (>=0.1.0, <=0.2.1), com.arangodb:arangodb-graphql (>=1.0, <=1.2) +74 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (11.0)

com.graphql-java:graphql-java MAVEN version 11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.1.0, =1.0, =1.0, =1.0, =6.0.4, =untagged-d71cea9a82400b42eea3, =0.19.0, =5.6.0,...

com.distelli.graphql:graphql-apigen (5.0.0), com.distelli.graphql:graphql-apigen-deps (5.0.0) +54 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (12.0)

com.graphql-java:graphql-java MAVEN version 12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.distelli.graphql:graphql-apigen 5.0.0 - com.distelli.graphql:graphql-apigen-deps 5.0.0 -...

com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugin (>=0.1.0, <=0.3.3), com.auritylab.graphql-kotlin-toolkit:codegen (>=0.1.0, <=0.3.3) +129 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (13.0)

com.graphql-java:graphql-java MAVEN version 13.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugi...

cc.voox:graphql (>=0.3.0, <=0.9.1), cc.voox:graphql-spring-boot-starter (>=1.0.0, <=1.1.0) +145 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (14.0)

com.graphql-java:graphql-java MAVEN version 14.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql =0.3.0, =1.0.0, =1.3.0, =1.1.0, =0.1.0, =1.9.0-alpha1, =1.9.0-alpha1, =1.9.0-alpha1,...

cc.voox:graphql (0.9.2), cc.voox:graphql-spring-boot-starter (>=1.2.0-beta, <=1.2.1) +31 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (14.1)

com.graphql-java:graphql-java MAVEN version 14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cc.voox:graphql 0.9.2 - cc.voox:graphql-spring-boot-starter =1.2.0-beta, =1.2.1, =2.0.3, =7.1.0, =7.1....

com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugin (>=0.4.0, <=0.7.1), com.auritylab.graphql-kotlin-toolkit:codegen (>=0.4.0, <=0.7.1) +283 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (15.0)

com.graphql-java:graphql-java MAVEN version 15.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.auritylab.graphql-kotlin-toolkit.codegen:com.auritylab.graphql-kotlin-toolkit.codegen.gradle.plugi...

org.apache.skywalking:graphql-16plus-plugin (>=8.10.0, <=9.6.0), org.craftercms:crafter-engine (>=3.1.25, <=3.1.29e) potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.0)

com.graphql-java:graphql-java MAVEN version 16.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - org.apache.skywalking:graphql-16plus-plugin =8.10.0, =3.1.25, =3.1.29e Source cves: CVE-2022-37734...

com.apollographql.federation:federation-graphql-java-support (>=0.6.3-rc1, <=0.6.5), com.apollographql.federation:federation-spring-example (>=0.6.3-rc1, <=0.6.5) +79 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.1)

com.graphql-java:graphql-java MAVEN version 16.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.apollographql.federation:federation-graphql-java-support =0.6.3-rc1, =0.6.3-rc1, =3.0.0-rc1,...

cn.asany.chaos:jfantasy-graphql (>=2.8.5, <=2.8.7), com.arianegraphql:graphql-ktx (>=0.0.1, <=0.0.2) +252 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (16.2)

com.graphql-java:graphql-java MAVEN version 16.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - cn.asany.chaos:jfantasy-graphql =2.8.5, =0.0.1, =0.0.1, =0.0.1, =0.7.2, =0.7.2, =0.7.2, =0.7.2, =0.7.2...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +245 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=17.0-beta1, <=17.3)

com.graphql-java:graphql-java MAVEN version =17.0-beta1, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.7.0, =0.7.0, =0.0.3, =0.0.3, =0.0.3, =1.6.9, =1.6.20 and more Source cves: CVE-2022-37734 Source advisory: OSV:GHSA-V62J-CXHH-FQ22...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +245 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=17.0-beta1, <=17.3)

com.graphql-java:graphql-java MAVEN version =17.0-beta1, =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.3, =0.7.0, =0.7.0, =0.0.3, =0.0.3, =0.0.3, =1.6.9, =1.6.20 and more Source cves: CVE-2022-37734 Source advisory: GHSA-V62J-CXHH-FQ22...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

cn.asany.chaos:jfantasy-graphql (>=2.10.0, <=2.11.0), com.apollographql.federation:federation-graphql-java-support (>=2.0.2, <=2.0.3) +176 more potentially affected by CVE-2022-37734 via com.graphql-java:graphql-java (>=18.0, <=18.2)

com.graphql-java:graphql-java MAVEN version =18.0, =2.10.0, =2.0.2, =6.0.0-alpha.6, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =6.0.0-alpha.1, =0.1.11, =1.0.1 and more Source cves: CVE-2022-37734...

graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4...