CVE-2023-28867
1 advisory.
Maven/com.graphql-java:graphql-java CVE-2023-28867: high 7.5
GraphQL Java vulnerable to stack consumption
Action: Upgrade com.graphql-java:graphql-java to 0.0.0-2023-03-20T01-49-44-80e3135 (0.x), 17.5 (17.x), 18.4 (18.x), 19.4 (19.x) or 20.1 (20.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
| 1.2 | 17.5 | - |
| 18.0 | 18.4 | - |
| 19.0 | 19.4 | - |
| 20.0 | 20.1 | - |
Fixed versions
| 0.0.0-2023-03-20T01-49-44-80e3135 | 17.5 | 18.4 | 19.4 | 20.1 |
Sources
- osv: GHSA-p4qx-6w5p-4rj2
- https://nvd.nist.gov/vuln/detail/CVE-2023-28867
- https://github.com/graphql-java/graphql-java/pull/3112
- https://github.com/graphql-java/graphql-java
- https://github.com/graphql-java/graphql-java/releases/tag/v17.5
- https://github.com/graphql-java/graphql-java/releases/tag/v18.4
- https://github.com/graphql-java/graphql-java/releases/tag/v19.4
- https://github.com/graphql-java/graphql-java/releases/tag/v20.1
CVE-2023-28867 · published · modified · JSON