View all vulnerabilities

CVE-2023-49559

gqlparser denial of service vulnerability via the parserDirectives function

An issue in vektah gqlparser open-source-library v.2.5.10 allows a remote attacker to cause a denial of service via a crafted script to the parserDirectives function.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
5.3
Score Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Versions
github.com/vektah/gqlparser/v2 < 2.5.14; github.com/vektah/gqlparser < 2.5.14
Severity
Medium
Ecosystem
GO
Publish Date
June 12, 2024
Modified Date
December 3, 2024