https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:05:15.432622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-187995 EUVD-2026-187995 2026-10-04T01:05:15.437603+00:00 EUVD-2026-187995 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26144 fkie_cve-2023-26144 2026-10-04T01:05:15.437637+00:00

Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.

 https://cve.radiocsirt.org/vuln/ghsa-9pv7-vfvm-6vr7 GHSA-9pv7-vfvm-6vr7 — graphql Uncontrolled Resource Consumption vulnerability 2026-10-04T01:05:15.437669+00:00

Affected: npm: graphql

Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance.

**Note:** It was not proven that this vulnerability can crash the process.

 https://cve.radiocsirt.org/vuln/gsd-2023-26144 gsd-2023-26144 2026-10-04T01:05:15.437694+00:00 gsd-2023-26144 https://cve.radiocsirt.org/vuln/rhba-2023:6078 RHBA-2023:6078 — Red Hat Bug Fix Advisory: MTV 2.5.2 Images 2026-10-04T01:05:15.437707+00:00

golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang-github-gin-gonic-gin: Improper Input Validation graphql: Insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26144 UBUNTU-CVE-2023-26144 2026-10-04T01:05:15.437738+00:00

Affected: Ubuntu:22.04:LTS: node-graphql, Ubuntu:24.04:LTS: node-graphql, Ubuntu:25.10: node-graphql, Ubuntu:26.04:LTS: node-graphql

Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.