CGA-gvh2-74x2-p73w

Published

Last updated

https://images.chainguard.dev/security/CGA-gvh2-74x2-p73w

Package

stargate

Latest Update

Fixed

Fixed Version

1.0.85-r1

Aliases

Severity

7.5

High

CVSS V3

Summary

GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service

Description

GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.

References

Updates

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CGA-gvh2-74x2-p73w

Severity

Summary

Description

References

Updates

Product

Why Chainguard

Customers

Company

Resources