graphql-php vulnerabilities

CVEs whose affected-version data names the graphql-php package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-40476High· 7.5

5mo ago

graphql-go is a Go implementation of GraphQL

graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the OverlappingFieldsCanBeMerged validation rule performs O(n²) pairwise comparisons of fields sharing the same response name. An attacker can send a query with…

▾ Twilightwebonyx · graphql-phpEPSS 0.58%via NVD