GHSA-2HMF-46V7-V6FX gqlparser denial of service vulnerability via the parserDirectives function

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...

PT-2024-13747 · Unknown · Vektah Gqlparser

Name of the Vulnerable Software and Affected Versions: vektah gqlparser version 2.5.10 Description: An issue in the vektah gqlparser open-source-library allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function. This issue can be exploited to...

gqlparser security vulnerability

gqlparser is a parser for graphql by Adam Scarr, a personal developer in Australia. A security vulnerability exists in vektah gqlparser version v.2.5.10, which originated from a vulnerability that allows remote attackers to cause a denial of service by writing a script to the parserDirectives...

CVE-2023-49559

CVE-2023-49559 affects vektah/gqlparser (open-source library) v2.5.10. A crafted script targeting the parseDirectives/ parserDirectives path can cause a denial of service. CVE entries from Red Hat and Veracode corroborate a DoS in gqlparser via parsing input. There is no explicit remediation/vers...

CVE-2023-49559

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function...