{"id":"CVE-2025-27407","aliases":["DEBIAN-CVE-2025-27407","DLA-4263-1","EUVD-2025-7224","GHSA-q92j-grw3-h492","RHSA-2025:3490","RHSA-2025:3491","RHSA-2025:3492","RHSA-2025:4576","UBUNTU-CVE-2025-27407"],"status":"published","title":"Remote code execution when loading a crafted GraphQL schema","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.03102,"percentile":0.87868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-94"],"published":"2025-03-12T18:15:57Z","modified":"2026-10-28T02:31:05Z","exploits":[{"source":"pocgithub","id":"LoGGGG2402/CVE-2025-27407","title":"LoGGGG2402/CVE-2025-27407","date":"2026-04-25","url":"https://github.com/LoGGGG2402/CVE-2025-27407"}],"fixes":[{"ecosystem":"RubyGems","package":"graphql","fixed_in":["2.4.13","2.3.21","2.0.32","1.13.24","1.12.25","2.1.15","1.11.11","2.2.17"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:13","package":"ruby-graphql","fixed_in":["2.2.17-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby-graphql","fixed_in":["2.2.17-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"ruby-graphql","fixed_in":["1.11.12-0+deb11u1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.13"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0"},{"fixed":"2.3.21"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.32"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.13.24"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.25"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.15"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.5"},{"fixed":"1.11.11"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.17"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.15-1","1.13.20-1","2.2.17-1","2.2.5-1","2.2.5-2","2.2.5-3","2.5.19-1","2.5.20-1","2.6.0-1","2.6.3-1","2.6.6-1","2.6.9-1"]},{"source":"osv","ecosystem":"Debian:13","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.17-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.17-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.12-0+deb11u1"}]}],"versions":["1.11.10-1","1.11.4-1","1.11.8-1","1.11.8-2","1.11.8-3"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.13"}]}],"versions":["2.4.0","2.4.1","2.4.10","2.4.11","2.4.12","2.4.2","2.4.3","2.4.4","2.4.5","2.4.6","2.4.7","2.4.8","2.4.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.0"},{"fixed":"2.3.21"}]}],"versions":["2.3.0","2.3.1","2.3.10","2.3.11","2.3.12","2.3.13","2.3.14","2.3.15","2.3.16","2.3.17","2.3.18","2.3.19","2.3.2","2.3.20","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7","2.3.8","2.3.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.2.0"},{"fixed":"2.2.17"}]}],"versions":["2.2.0","2.2.1","2.2.10","2.2.11","2.2.12","2.2.13","2.2.14","2.2.15","2.2.16","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.2.7","2.2.8","2.2.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.1.15"}]}],"versions":["2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.0"},{"fixed":"2.0.32"}]}],"versions":["2.0.0","2.0.1","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.17.1","2.0.17.2","2.0.18","2.0.19","2.0.2","2.0.20","2.0.21","2.0.22","2.0.23","2.0.24","2.0.25","2.0.26","2.0.27","2.0.28","2.0.29","2.0.3","2.0.30","2.0.31","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.13.0"},{"fixed":"1.13.24"}]}],"versions":["1.13.0","1.13.1","1.13.10","1.13.11","1.13.12","1.13.13","1.13.14","1.13.15","1.13.16","1.13.17","1.13.18","1.13.19","1.13.2","1.13.20","1.13.21","1.13.22","1.13.23","1.13.3","1.13.4","1.13.5","1.13.6","1.13.7","1.13.8","1.13.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.12.0"},{"fixed":"1.12.25"}]}],"versions":["1.12.0","1.12.1","1.12.10","1.12.11","1.12.12","1.12.13","1.12.14","1.12.15","1.12.16","1.12.17","1.12.18","1.12.19","1.12.2","1.12.20","1.12.21","1.12.22","1.12.23","1.12.24","1.12.3","1.12.4","1.12.5","1.12.6","1.12.7","1.12.8","1.12.9"]},{"source":"osv","ecosystem":"RubyGems","package":"graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.5"},{"fixed":"1.11.11"}]}],"versions":["1.11.10","1.11.5","1.11.6","1.11.7","1.11.8","1.11.9"]},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el9sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el8pc"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.14::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.14::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.5-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.19-1.el9pc"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13.24-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el9sat"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.4-1","1.9.16-1","1.9.19-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.11.4-1","1.11.8-3","1.11.10-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.13.15-1","1.13.20-1","2.2.5-3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.5-3","2.2.17-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.19-1","2.6.0-1","2.6.3-1","2.6.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ruby-graphql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.17-1","2.5.19-1"]}],"products":[{"vendor":"rmosolgo","product":"graphql-ruby"}],"references":[{"url":"https://github.com/rmosolgo/graphql-ruby/security/advisories/GHSA-q92j-grw3-h492","tags":["x_refsource_CONFIRM","advisory","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/28233b16c0eb9d0fb7808f4980e061dc7507c4cd","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/2d2f4ed1f79472f8eed29c864b039649e1de238f","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/5c5a7b9a9bdce143be048074aea50edb7bb747be","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/6eca16b9fa553aa957099a30dbde64ddcdac52ca","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/d0963289e0dab4ea893bbecf12bb7d89294957bb","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/d1117ae0361d9ed67e0795b07f5c3e98e62f3c7c","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/e3b33ace05391da2871c75ab4d3b66e29133b367","tags":["x_refsource_MISC","fix","web","article","report"]},{"url":"https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released","tags":["x_refsource_MISC","web","report"]},{"url":"https://github.com/github-community-projects/graphql-client","tags":["x_refsource_MISC","package","web","article","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00002.html","tags":["web"]},{"url":"https://github.com/rmosolgo/graphql-ruby/commit/e58676c70aa695e3052ba1fbc787efee4ba7d67e","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27407","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/graphql/CVE-2025-27407.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q92j-grw3-h492"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27407.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-27407","tags":["advisory"]},{"url":"https://github.com/rmosolgo/graphql-ruby","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3490","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.16/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351767","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-30808","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31568","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31569","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31570","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31571","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31572","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31576","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31577","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3490.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27407","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27407","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-27610","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-27610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27610","tags":["advisory"]},{"url":"https://github.com/rack/rack/commit/50caab74fa01ee8f5dbdee7bb2782126d20c6583","tags":["article"]},{"url":"https://github.com/rack/rack/security/advisories/GHSA-7wqh-767x-r66v","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3491","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.15/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333854","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3491.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56201","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/commit/767b23617628419ae3709ccfb02f9602ae9fe51f","tags":["article"]},{"url":"https://github.com/pallets/jinja/issues/1792","tags":["article"]},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.5","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:3492","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_satellite/6.14/html/updating_red_hat_satellite/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3492.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:4576","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-12130","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16243","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16248","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-16392","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-17448","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-17783","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19325","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19336","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19505","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19515","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19781","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-19933","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20010","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20579","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20586","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20673","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-20889","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-21359","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22510","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22966","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-22981","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23035","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23114","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23229","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-2340","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-23647","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24108","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24282","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24725","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-24795","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25448","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-2549","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-25949","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26058","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26076","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26522","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26537","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26605","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26741","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-26866","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27153","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27221","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27308","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27349","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27369","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27374","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27385","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27388","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27418","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27420","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27427","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27476","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27541","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27554","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27620","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27627","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27675","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27703","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27717","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27756","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27847","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27863","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27874","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27875","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27924","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27939","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-27979","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28029","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28060","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28185","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28216","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28293","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28311","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28312","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28337","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28338","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28356","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28443","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28471","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28472","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28486","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28493","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28526","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28538","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28552","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28553","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28556","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28575","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28613","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28662","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28735","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28743","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28756","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28818","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28823","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28826","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28832","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28856","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28860","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28894","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28981","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-28994","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29017","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29058","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29062","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29068","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29090","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29203","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29209","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29212","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29214","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29314","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29322","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29332","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29345","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29347","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29454","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29469","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29567","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29596","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29622","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29623","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29667","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29670","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29675","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29679","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29715","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29794","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29863","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29939","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29945","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29950","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-29957","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30004","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30014","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30043","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30070","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30098","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30102","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30106","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30108","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30112","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30118","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30138","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30141","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30152","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30154","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30167","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30172","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30176","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30186","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30188","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30209","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30220","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30227","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30228","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30314","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30342","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30374","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30378","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30403","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30443","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30464","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30491","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30541","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30543","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30544","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30577","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30611","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30614","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30625","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30636","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30637","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30669","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30686","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30715","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30717","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30726","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30761","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30767","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30785","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30790","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30815","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30841","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30846","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30869","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30916","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30961","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30962","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30967","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-30970","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31040","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31105","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31111","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31157","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31160","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31193","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31196","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31203","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31220","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31241","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31308","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31315","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31316","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31338","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31351","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31398","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31451","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31475","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31479","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31502","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31526","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31588","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31602","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31645","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31813","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-31814","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32426","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32447","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32467","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32604","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-32605","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-5118","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-6776","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_4576.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56326","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56326","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/commit/48b0687e05a5466a91cd5812d604fa37ad0943b4","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-56374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2337996","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56374","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56374","tags":["advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/01/14/2","tags":["article"]},{"url":"https://docs.djangoproject.com/en/dev/releases/security/","tags":["article"]},{"url":"https://groups.google.com/g/django-announce","tags":["article"]},{"url":"https://www.djangoproject.com/weblog/2025/jan/14/security-releases/","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2025-27407","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-27407","title":"Remote code execution when loading a crafted GraphQL schema","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T18:15:57.957Z","modified":"2025-11-03T19:45:32.739Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-7224","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T18:15:57Z","modified":"2025-11-03T19:45:32Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:33.269212Z"}],"ghsa":[{"id":"GHSA-q92j-grw3-h492","title":"graphql allows remote code execution when loading a crafted GraphQL schema","description":"# Summary\n\nLoading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use [GraphQL::Client](https://github.com/github-community-projects/graphql-client) to load external schemas via GraphQL introspection.","status":"published","published":"2025-03-12T19:28:00Z","modified":"2025-11-03T21:33:11Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:39:04.350802Z"}],"nvd":[{"id":"CVE-2025-27407","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T19:15:40.597Z","modified":"2026-06-17T09:03:31.773Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:53.93104Z"}],"osv":[{"id":"CVE-2025-27407","title":"Remote code execution when loading a crafted GraphQL schema","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T18:15:57.957Z","modified":"2026-10-28T02:31:05.169153907Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"DEBIAN-CVE-2025-27407","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T19:15:40.597Z","modified":"2026-09-01T20:05:45.669728838Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"GHSA-q92j-grw3-h492","title":"graphql allows remote code execution when loading a crafted GraphQL schema","description":"# Summary\n\nLoading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use [GraphQL::Client](https://github.com/github-community-projects/graphql-client) to load external schemas via GraphQL introspection.","status":"published","published":"2025-03-12T19:28:00Z","modified":"2025-11-03T21:56:26.343569Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:46:54.40888Z"},{"id":"RHSA-2025:3490","title":"Red Hat Security Advisory: Satellite 6.16.4 Async Update","status":"published","published":"2025-04-02T10:06:08Z","modified":"2026-07-12T10:06:15Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3491","title":"Red Hat Security Advisory: Satellite 6.15.5.2 Async Update","status":"published","published":"2025-04-02T10:06:09Z","modified":"2026-10-16T10:08:40Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:3492","title":"Red Hat Security Advisory: Satellite 6.14.4.5 Async Update","status":"published","published":"2025-04-02T10:06:09Z","modified":"2026-07-12T10:06:16Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"RHSA-2025:4576","title":"Red Hat Security Advisory: Satellite 6.17.0 release","status":"published","published":"2025-05-07T10:05:50Z","modified":"2026-10-16T10:08:56Z","cvss":[{"version":"3.1","score":8.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.133041Z"},{"id":"UBUNTU-CVE-2025-27407","description":"graphql-ruby is a Ruby implementation of GraphQL. Starting in version 1.11.5 and prior to versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21, loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote code execution. Any system which loads a schema by JSON from an untrusted source is vulnerable, including those that use GraphQL::Client to load external schemas via GraphQL introspection. Versions 1.11.8, 1.12.25, 1.13.24, 2.0.32, 2.1.14, 2.2.17, and 2.3.21 contain a patch for the issue.","status":"published","published":"2025-03-12T19:15:00Z","modified":"2026-10-17T12:56:49.294589519Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:26.330196Z"},{"id":"DLA-4263-1","title":"ruby-graphql - security update","status":"published","published":"2025-08-04T00:00:00Z","modified":"2026-03-09T02:09:38.316677Z","updated_at":"2026-11-02T15:46:12.7027Z"}]}}