https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:02:04 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187995 EUVD-2026-187995 https://cve.radiocsirt.org/vuln/euvd-2026-187995 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26144 <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.</p> <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26144 https://cve.radiocsirt.org/vuln/ghsa-9pv7-vfvm-6vr7 <p><strong>Affected:</strong> npm: graphql</p> <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance.</p> <p>**Note:** It was not proven that this vulnerability can crash the process.</p> <p><strong>Affected:</strong> npm: graphql</p> <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance.</p> <p>**Note:** It was not proven that this vulnerability can crash the process.</p> https://cve.radiocsirt.org/vuln/ghsa-9pv7-vfvm-6vr7 https://cve.radiocsirt.org/vuln/gsd-2023-26144 gsd-2023-26144 https://cve.radiocsirt.org/vuln/gsd-2023-26144 https://cve.radiocsirt.org/vuln/rhba-2023:6078 <p>golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang-github-gin-gonic-gin: Improper Input Validation graphql: Insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> <p>golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang-github-gin-gonic-gin: Improper Input Validation graphql: Insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries golang-github-gin-gonic-gin: Gin Web Framework does not properly sanitize filename parameter of Context.FileAttachment function golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)</p> https://cve.radiocsirt.org/vuln/rhba-2023:6078 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26144 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-graphql, Ubuntu:24.04:LTS: node-graphql, Ubuntu:25.10: node-graphql, Ubuntu:26.04:LTS: node-graphql</p> <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: node-graphql, Ubuntu:24.04:LTS: node-graphql, Ubuntu:25.10: node-graphql, Ubuntu:26.04:LTS: node-graphql</p> <p>Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance. **Note:** It was not proven that this vulnerability can crash the process.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-26144