We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 90283d9 commit 4c21b17Copy full SHA for 4c21b17
data/reports/GO-2022-0942.yaml
@@ -0,0 +1,18 @@
1
+modules:
2
+ - module: github.com/graphql-go/graphql
3
+ versions:
4
+ vulnerable_at: 0.8.0
5
+ packages:
6
+ - package: github.com/graphql-go/graphql/language/parser
7
+ symbols:
8
+ - Parse
9
+description: |
10
+ graphql-go (aka GraphQL for Go) has infinite recursion
11
+ in the type definition parser.
12
+cves:
13
+ - CVE-2022-37315
14
+ghsas:
15
+ - GHSA-h3qm-jrrf-cgj3
16
+links:
17
+ pr: https://github.com/graphql-go/graphql/pull/642
18
+ commit: https://github.com/graphql-go/graphql/pull/642/commits/4188bd5b3877f7badb951b421cf66e0af2eacb22
0 commit comments