GitHub Advisoryadvisory · crates.io

GHSA-xq3c-8gqm-v648 async-graphql / async-graphql - @DOS GraphQL Nested Fragments overflow

HIGH Published 2022-07-29 Modified 2022-07-29 Official page ↗

Ecosystem: crates.io
Packages: async-graphql
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Reviewed: 2022-07-29

Affected packages

• crates.io async-graphql: < 4.0.6 → fixed in 4.0.6

Description

Impact Executing deeply nested queries may cause stack overflow. Patches Upgrade to `v4.0.6`

References