CyberSecBulletin

Absinthe-graphql vulnerabilities

We track 2 vulnerabilities in Absinthe-graphql products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 8, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Absinthe-graphql vulnerabilities

  • 7.5 High severity

    absinthe: Inefficient Algorithmic Complexity

    CVE-2026-43967Absinthe-graphql

    Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Document.Validation.UniqueFragmentNames':run/2 iterates over all fr

  • 7.5 High severity

    absinthe: Allocation of Resources Without Limits or Throttling

    CVE-2026-42793Absinthe-graphql

    Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL. Multiple Blueprint.Draft.convert/2 implementations