RubyGems/graphql: medium 5.3
GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens
Action: Upgrade graphql to 2.3.23 or later.
bundle update graphqlAffected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.0 | 2.6.1 | - |
| 2.5.0 | 2.5.26 | - |
| 2.4.0 | 2.4.18 | - |
| 2.3.1 | 2.3.23 | - |
Fixed versions
| 2.6.1 | 2.5.26 | 2.4.18 | 2.3.23 |
Sources
- osv: GHSA-3h96-34p3-xm76
- https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-3h96-34p3-xm76
- https://github.com/rmosolgo/graphql-ruby
published · modified · JSON