Versions of the package graphql from 16.3.0 and before 16.8.1 are vulnerable to Denial of Service (DoS) due to insufficient checks in the OverlappingFieldsCanBeMergedRule.ts file when parsing large queries. This vulnerability allows an attacker to degrade system performance.
**Note:** It was not proven that this vulnerability can crash the process.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: snyk
Published: 2023-09-20T05:00:02.129Z
Updated: 2024-08-02T11:39:06.580Z
Reserved: 2023-02-20T10:28:48.928Z
Link: CVE-2023-26144
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-09-20T05:15:39.923
Modified: 2023-11-07T04:09:27.820
Link: CVE-2023-26144
Redhat