Security Advisory
CVE-2024-40094
5.3
MEDIUM
Vulnerability Description
GraphQL Java (aka graphql-java) before 21.5 does not properly consider ExecutableNormalizedFields (ENFs) as part of preventing denial of service via introspection queries. 20.9 and 19.11 are also fixed versions.
Published Date
July 30, 2024
Official Source
NIST NVD Advisory