graphql-core vulnerabilities (Debian)

2 vulnerabilities.

• graphql-core Debian GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule CVE-2026-75507 Fix available 7.5 HighOctober 22, 2026
• graphql-core Debian GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit CVE-2026-75508 Fix available 7.5 HighOctober 22, 2026