graphql vulnerabilities (RubyGems)

2 vulnerabilities.

• graphql RubyGems GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens GHSA-3h96-34p3-xm76 Fix available 5.3 MediumMay 5, 2026
• graphql RubyGems Remote code execution when loading a crafted GraphQL schema CVE-2025-27407 Public exploitFix available 9.1 CriticalMarch 12, 2025