CVE-2022-37734
1 advisory.
Maven/com.graphql-java:graphql-java CVE-2022-37734: high 7.5
graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources
Action: Upgrade com.graphql-java:graphql-java to 17.4 (17.x) or 18.3 (18.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 17.4 | - |
| 18.0 | 18.3 | - |
Fixed versions
| 17.4 | 18.3 |
Sources
- osv: GHSA-v62j-cxhh-fq22
- https://nvd.nist.gov/vuln/detail/CVE-2022-37734
- https://github.com/graphql-java/graphql-java/issues/2888
- https://github.com/graphql-java/graphql-java/pull/2892
- https://github.com/graphql-java/graphql-java
- https://github.com/graphql-java/graphql-java/discussions/2958
- https://github.com/graphql-java/graphql-java/releases
- https://security.snyk.io/vuln/SNYK-JAVA-COMGRAPHQLJAVA-3021519
CVE-2022-37734 · published · modified · JSON