Go/github.com/graph-gophers/graphql-go CVE-2022-21708: unknown, EPSS 1.24%

Panic via malicious inputs in github.com/graph-gophers/graphql-go

Action: Upgrade github.com/graph-gophers/graphql-go to 1.3.0 or later.

go get github.com/graph-gophers/graphql-go@v1.3.0

Affected

Fixed versions

Sources

• osv: GO-2022-0300
• https://github.com/graph-gophers/graphql-go/commit/eae31ca73eb3473c544710955d1dbebc22605bfe

CVE-2022-21708 · published 2022-07-15T23:10:20Z · modified 2024-05-20T16:03:47Z · JSON