com.graphql-java:graphql-java vulnerabilities (Maven)

3 vulnerabilities.

• com.graphql-java:graphql-java Maven GraphQL Java does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service CVE-2024-40094 Public exploitFix available 5.3 MediumJuly 30, 2024
• com.graphql-java:graphql-java Maven GraphQL Java vulnerable to stack consumption CVE-2023-28867 Fix available 7.5 HighMarch 27, 2023
• com.graphql-java:graphql-java Maven graphql-java vulnerable to Denial of Service via GraphQL query that consumes CPU resources CVE-2022-37734 Fix available 7.5 HighSeptember 12, 2022