CGA-28jv-3vhj-mh4f

Published

Last updated

https://images.chainguard.dev/security/CGA-28jv-3vhj-mh4f

Package

zot

Latest Update

Fixed

Fixed Version

2.0.4-r6

Aliases

Severity

5.3

Medium

CVSS V3

Summary

gqlparser denial of service vulnerability via the parserDirectives function

Description

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-28jv-3vhj-mh4f

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources