io.smallrye/smallrye-graphql vulnerabilities

CVEs whose affected-version data names the io.smallrye/smallrye-graphql package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-76763High· 7.5

1mo ago

Io.smallrye/smallrye-graphql: smallrye graphql: unauthenticated denial of service via large exponent float literals

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing…

▾ TwilightRed Hat · io.smallrye/smallrye-graphqlEPSS 0.61%via CVEORG