silverstripe/graphql Security Advisories for 3.8.0 (1)
-
[HIGH] CVE-2023-40180 DDOS Vulnerability on GraphQL due to lack of protection against recursive queries
PKSA-r8b1-wm85-sfnm CVE-2023-40180 GHSA-v23w-pppm-jh66
Affected version: >=3.0.0,<3.8.2|>=4.0.0,<4.1.3|>=4.2.0,<4.2.5|>=4.3.0,<4.3.4|>=5.0.0,<5.0.3
Reported by:
GitHub, FriendsOfPHP/security-advisories