Homepage

com.graphql-java:graphql-java@17.2 vulnerabilities

  • latest version

    22.3

  • latest non vulnerable version

    230521-nf-execution

  • first published

    9 years ago

  • latest version published

    5 months ago

  • licenses detected

    • MIT
      [0.0.0-2021-05-04T21-12-03-d3ac10b0,)

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the com.graphql-java:graphql-java package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Stack-based Buffer Overflow

    Affected versions of this package are vulnerable to Stack-based Buffer Overflow when processing a deeply recursive GraphQL query. An attacker can send such a query to exhaust stack memory and cause a crash.

    How to fix Stack-based Buffer Overflow?

    Upgrade com.graphql-java:graphql-java to version 0.0.0-2023-03-20T01-49-44-80e3135, 17.5, 18.4, 19.4, 20.1 or higher.

    [,0.0.0-2023-03-20T01-49-44-80e3135)[1.2,17.5)[18.0,18.4)[19.0,19.4)[20.0,20.1)
    • H
    Denial of Service (DoS)

    Affected versions of this package are vulnerable to Denial of Service (DoS) due to Directives overloading when using the parserOptions function. Exploiting this vulnerability is possible by sending a malicious GraphQL query.

    How to fix Denial of Service (DoS)?

    Upgrade com.graphql-java:graphql-java to version 0.0.0-2022-07-26T05-45-04-226aabd9, 17.4, 18.3 or higher.

    [,0.0.0-2022-07-26T05-45-04-226aabd9)[17.0,17.4)[18.0,18.3)
    Go back to all versions of this package