{"action":"Upgrade com.graphql-java:graphql-java to 0.0.0-2023-03-20T01-49-44-80e3135 (0.x), 17.5 (17.x), 18.4 (18.x), 19.4 (19.x) or 20.1 (20.x) or later.","affected":[{"introduced":"0"},{"fixed":"17.5","introduced":"1.2"},{"fixed":"18.4","introduced":"18.0"},{"fixed":"19.4","introduced":"19.0"},{"fixed":"20.1","introduced":"20.0"}],"component":"com.graphql-java:graphql-java","cve_ids":["CVE-2023-28867"],"ecosystem":"Maven","epss":0.01051,"exploited":false,"fixed_versions":["0.0.0-2023-03-20T01-49-44-80e3135","17.5","18.4","19.4","20.1"],"ghsa_id":"GHSA-p4qx-6w5p-4rj2","id":"tcs_01M5N96ED5KMD0PS878XCE2PN7","modified_at":"2023-11-08T04:12:15.496485Z","published_at":"2023-03-27T03:30:16Z","references":["https://osv.dev/vulnerability/GHSA-p4qx-6w5p-4rj2","https://nvd.nist.gov/vuln/detail/CVE-2023-28867","https://github.com/graphql-java/graphql-java/pull/3112","https://github.com/graphql-java/graphql-java","https://github.com/graphql-java/graphql-java/releases/tag/v17.5","https://github.com/graphql-java/graphql-java/releases/tag/v18.4","https://github.com/graphql-java/graphql-java/releases/tag/v19.4","https://github.com/graphql-java/graphql-java/releases/tag/v20.1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-p4qx-6w5p-4rj2","url":"https://osv.dev/vulnerability/GHSA-p4qx-6w5p-4rj2"}],"summary":"GraphQL Java vulnerable to stack consumption"}