Debian/node-graphql: medium 5.3
Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large qu
Action: Upgrade node-graphql to 16.8.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.8.1-1 | - |
Fixed versions
| 16.8.1-1 |
Sources
- osv: DEBIAN-CVE-2023-26144#Debian:14/node-graphql
- https://security-tracker.debian.org/tracker/CVE-2023-26144
published · modified · JSON