webonyx/graphql-php
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input | webonyx/graphql-php | Composer | High | Fix reported | |
| graphql-php is affected by a Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation | webonyx/graphql-php | Composer | Medium | Fix reported | |
| webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments | webonyx/graphql-php | Composer | High | Fix reported |