DirectorySecurity Advisories
Sign In
Security Advisories

CGA-vq2h-9hfx-rqr4

Published

Last updated

https://images.chainguard.dev/security/CGA-vq2h-9hfx-rqr4
Package

melange

Latest Update
Fixed
Fixed Version

0.8.6-r1

Aliases
  • CVE-2023-49559
  • GHSA-2hmf-46v7-v6fx

Severity

5.3

Medium

CVSS V3

Summary

gqlparser denial of service vulnerability via the parserDirectives function

Description

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images