{"action":"Upgrade juniper_warp to 0.9.1 or later.","affected":[{"fixed":"0.9.1","introduced":"0.0.0-0"}],"component":"juniper_warp","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.9.1"],"ghsa_id":"GHSA-fj3h-2jc3-973v","id":"tcs_01M641QQCG75N3E2WC2F29P0P7","modified_at":"2026-10-29T14:15:02.334799134Z","published_at":"2026-10-29T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0419","https://crates.io/crates/juniper_warp","https://rustsec.org/advisories/RUSTSEC-2026-0419.html","https://github.com/graphql-rust/juniper/pull/1406"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0419","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0419"}],"summary":"Unbounded memory use on large request bodies"}