{"id":"OSV-2025-436","aliases":[],"status":"published","title":"Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211\n\n```\nCrash type: Security exception\nCrash state:\ngraphql.parser.GraphqlAntlrToLanguage.createNonNullType\ngraphql.parser.GraphqlAntlrToLanguage.createType\ngraphql.parser.GraphqlAntlrToLanguage.createListType\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-06-05T00:11:24.382209Z","modified":"2025-06-05T00:11:24Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"graphql-java","ranges":[{"type":"GIT","events":[{"introduced":"f52305325593dcec70aba9c4a5717b18b6543fa0"},{"fixed":"9c927258ecbf5befa9990c134deb752835bcee9d"}]}],"versions":["25.0.beta-1","v22.0","v22.1","v22.2","v22.3","v22.4","v23.0","v23.1","v24.0","v24.1","v24.2","v25.0-beta-3","v25.0.beta-2","v25.0.beta-4","v25.0.beta-5"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-436","title":"Security exception in graphql.parser.GraphqlAntlrToLanguage.createNonNullType","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=422217211\n\n```\nCrash type: Security exception\nCrash state:\ngraphql.parser.GraphqlAntlrToLanguage.createNonNullType\ngraphql.parser.GraphqlAntlrToLanguage.createType\ngraphql.parser.GraphqlAntlrToLanguage.createListType\n```\n","status":"published","published":"2025-06-05T00:11:24.382209Z","modified":"2025-06-05T00:11:24.382444Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}