[ Vendor · 2 CVEs ]
graphql-python
CVEs affecting graphql-python published in the last 30 days, plus any graphql-python CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-75507 | 22 Oct 2026 | CVSS 7.5 | GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation ruleGraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule… | Fix |
| CVE-2026-75508 | 22 Oct 2026 | CVSS 7.5 | GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limitGraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in… | Fix |