{"action":"Upgrade graphql to 16.8.1 or later.","affected":[{"fixed":"16.8.1","introduced":"16.3.0"}],"component":"graphql","cve_ids":["CVE-2023-26144"],"ecosystem":"npm","epss":0.01454,"exploited":false,"fixed_versions":["16.8.1"],"ghsa_id":"GHSA-9pv7-vfvm-6vr7","id":"tcs_01M5KFGJ9KGAD44KHM43KR3ECB","modified_at":"2023-11-08T04:11:59.927465Z","published_at":"2023-09-20T06:30:50Z","references":["https://osv.dev/vulnerability/GHSA-9pv7-vfvm-6vr7","https://nvd.nist.gov/vuln/detail/CVE-2023-26144","https://github.com/graphql/graphql-js/issues/3955","https://github.com/graphql/graphql-js/pull/3972","https://github.com/graphql/graphql-js/commit/8f4c64eb6a7112a929ffeef00caa67529b3f2fcf","https://github.com/graphql/graphql-js","https://github.com/graphql/graphql-js/releases/tag/v16.8.1","https://security.snyk.io/vuln/SNYK-JS-GRAPHQL-5905181"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-9pv7-vfvm-6vr7","url":"https://osv.dev/vulnerability/GHSA-9pv7-vfvm-6vr7"}],"summary":"graphql Uncontrolled Resource Consumption vulnerability"}