https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:38:00 +0000 https://cve.radiocsirt.org/vuln/cve-2026-43967 <p><strong>Affected:</strong> absinthe-graphql absinthe</p> <p>Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation.</p> <p>&#39;Elixir.Absinthe.Phase.Document.Validation.UniqueFragmentNames&#39;:run/2 iterates over all fragments and for each one calls duplicate?/2, which evaluates Enum.count(fragments, &amp;(&amp;1.name == name)) — a full linear scan of the fragment list. The result is O(N²) comparisons per document, where N is the number of fragment definitions supplied by the caller.</p> <p>Because input.fragments is built directly from the GraphQL query body, N is fully attacker-controlled. A minimum-size fragment definition is roughly 16 bytes, so a ~1 MB document carries ~60,000 fragments and forces ~3.6 × 10⁹ comparisons inside this single validation phase. No authentication, schema knowledge, or special configuration is required.</p> <p>This issue affects absinthe: from 1.2.0 before 1.10.2.</p> <p><strong>Affected:</strong> absinthe-graphql absinthe</p> <p>Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation.</p> <p>&#39;Elixir.Absinthe.Phase.Document.Validation.UniqueFragmentNames&#39;:run/2 iterates over all fragments and for each one calls duplicate?/2, which evaluates Enum.count(fragments, &amp;(&amp;1.name == name)) — a full linear scan of the fragment list. The result is O(N²) comparisons per document, where N is the number of fragment definitions supplied by the caller.</p> <p>Because input.fragments is built directly from the GraphQL query body, N is fully attacker-controlled. A minimum-size fragment definition is roughly 16 bytes, so a ~1 MB document carries ~60,000 fragments and forces ~3.6 × 10⁹ comparisons inside this single validation phase. No authentication, schema knowledge, or special configuration is required.</p> <p>This issue affects absinthe: from 1.2.0 before 1.10.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-43967