OSV-2025-436
Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211
Crash type: Security exception
Crash state:
graphql.parser.GraphqlAntlrToLanguage.createNonNullType
graphql.parser.GraphqlAntlrToLanguage.createType
graphql.parser.GraphqlAntlrToLanguage.createListType
What each source reports
OSV No score
Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211
Crash type: Security exception
Crash state:
graphql.parser.GraphqlAntlrToLanguage.createNonNullType
graphql.parser.GraphqlAntlrToLanguage.createType
graphql.parser.GraphqlAntlrToLanguage.createListType
- Record
OSV-2025-436- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
graphql-javaOSS-Fuzz |
Listed versions, plus commit ranges 25.0.beta-1v22.0v22.1v22.2v22.3 Show 10 moreShow lessv22.4v23.0v23.1v24.0v24.1v24.2v25.0-beta-3v25.0.beta-2v25.0.beta-4v25.0.beta-5 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-436 is a vulnerability with no CVSS score yet in graphql-java, published June 5, 2025. No source lists public exploit code. A source reports a fix.