GHSA-v62j-cxhh-fq22HighCVSS 7.5

graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources

Published
September 13, 2022
Last Modified
January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-37734 →

📋 Description

graphql-java before 19.0, 18.3, and 17.4 is vulnerable to Denial of Service. An attacker send a malicious GraphQL query that consumes CPU resources. The fixed versions are 19.0, 18.3, and 17.4.

🎯 Affected products2

  • maven/com.graphql-java:graphql-java:< 17.4
  • maven/com.graphql-java:graphql-java:>= 18.0, < 18.3

🔗 References (7)