CVE-2022-37315

GraphQL-go (GraphQL for Go) up to v0.8.0 contains an infinite recursion in the type-definition parser. The CVE-2022-37315 entry notes this vulnerability impact, with an NVD CVSSv3.1 base score of 7.5 (HIGH) and network attack vector, no privileges required, no user interaction, and availability i...

CVE-2022-21708

The CVE-2022-21708 issue affects graphql-go (GraphQL server). In versions prior to 1.3.0, a bug allows an attacker with access to the GraphQL handler to send crafted queries that trigger a stack overflow panic, potentially impairing the server’s ability to serve data. The vulnerability is fixed i...