CVE-2024-40094

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-40094

CGA ID

CGA-gvh2-74x2-p73w

Severity

7.5

High

CVSS V3

Description

GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2024-40094

Severity

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources