Skip to content

Commit 4c21b17

Browse files
committed
x/vulndb: add data/reports/GO-2022-0942.yaml for CVE-2022-37315
Fixes #942 Change-Id: I1d84065f2482d045f67e508b07b8a2f1ec4af485 Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/425087 Reviewed-by: Julie Qiu <[email protected]> Run-TryBot: Jonathan Amsterdam <[email protected]> TryBot-Result: Gopher Robot <[email protected]>
1 parent 90283d9 commit 4c21b17

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

data/reports/GO-2022-0942.yaml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
modules:
2+
- module: github.com/graphql-go/graphql
3+
versions:
4+
vulnerable_at: 0.8.0
5+
packages:
6+
- package: github.com/graphql-go/graphql/language/parser
7+
symbols:
8+
- Parse
9+
description: |
10+
graphql-go (aka GraphQL for Go) has infinite recursion
11+
in the type definition parser.
12+
cves:
13+
- CVE-2022-37315
14+
ghsas:
15+
- GHSA-h3qm-jrrf-cgj3
16+
links:
17+
pr: https://github.com/graphql-go/graphql/pull/642
18+
commit: https://github.com/graphql-go/graphql/pull/642/commits/4188bd5b3877f7badb951b421cf66e0af2eacb22

0 commit comments

Comments
 (0)