8 matches found
CVE-2026-107376
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...
CVE-2026-107376 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...
EUVD-2026-95133
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...
CVE-2026-107376
The webonyx graphql-php PHP implementation of the GraphQL specification is vulnerable to a stack overflow via uncontrolled recursion. Specifically, the GraphQL\Language\Parser performs recursive descent without a limit in parseSelectionSet , parseValueLiteral , and parseTypeReference . A remote a...
CVE-2026-107376
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can submit deeply nested selection sets, obje...
CLSA-2026-1786616236 TuxCare security update for webonyx/graphql-php (4 CVEs)
TuxCare rebuilt webonyx/graphql-php to address 4 CVEs. Fixed in v14.11.10-p1+tuxcare...
PT-2026-80149
TuxCare rebuilt webonyx/graphql-php to address 4 CVEs. Fixed in v14.11.10-p1+tuxcare...
PT-2026-108110
Name of the Vulnerable Software and Affected Versions webonyx graphql-php versions prior to 15.32.3 Description The GraphQLLanguageParser performs recursive descent without a recursion limit in the parseSelectionSet, parseValueLiteral, and parseTypeReference functions. A remote attacker can submi...