Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:31:36 +0000 CVE-2022-31173 — Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow https://vulnerability.circl.lu/vuln/cve-2022-31173 <p><strong>Affected:</strong> graphql-rust juniper</p> <p>Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually.</p> <p><strong>Affected:</strong> graphql-rust juniper</p> <p>Juniper is a GraphQL server library for Rust. Affected versions of Juniper are vulnerable to uncontrolled recursion resulting in a program crash. This issue has been addressed in version 0.15.10. Users are advised to upgrade. Users unable to upgrade should limit the recursion depth manually.</p> https://vulnerability.circl.lu/vuln/cve-2022-31173 RUSTSEC-2022-0037 — Denial of service on deeply nested fragment requests https://vulnerability.circl.lu/vuln/rustsec-2022-0037 <p><strong>Affected:</strong> crates.io: async-graphql</p> <p>Deeply nested fragments in a GraphQL request may cause a stack overflow in the server.</p> <p><strong>Affected:</strong> crates.io: async-graphql</p> <p>Deeply nested fragments in a GraphQL request may cause a stack overflow in the server.</p> https://vulnerability.circl.lu/vuln/rustsec-2022-0037