CVE-2023-26144
1 advisory.
npm/graphql CVE-2023-26144: medium 5.3, EPSS 1.45%
graphql Uncontrolled Resource Consumption vulnerability
Action: Upgrade graphql to 16.8.1 or later.
npm i graphql@16.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 16.3.0 | 16.8.1 | - |
Fixed versions
| 16.8.1 |
Sources
- osv: GHSA-9pv7-vfvm-6vr7
- https://nvd.nist.gov/vuln/detail/CVE-2023-26144
- https://github.com/graphql/graphql-js/issues/3955
- https://github.com/graphql/graphql-js/pull/3972
- https://github.com/graphql/graphql-js/commit/8f4c64eb6a7112a929ffeef00caa67529b3f2fcf
- https://github.com/graphql/graphql-js
- https://github.com/graphql/graphql-js/releases/tag/v16.8.1
- https://security.snyk.io/vuln/SNYK-JS-GRAPHQL-5905181
CVE-2023-26144 · published · modified · JSON