absinthe vulnerabilities

2 known vulnerabilities in absinthe from Absinthe-graphql. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  absinthe: Inefficient Algorithmic Complexity

  CVE-2026-43967May 8, 2026Absinthe-graphql

  Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation. 'Elixir.Absinthe.Phase.Document.Validation.UniqueFragmentNames':run/2 iterates over all fr

• 7.5 High severity

  absinthe: Allocation of Resources Without Limits or Throttling

  CVE-2026-42793May 8, 2026Absinthe-graphql

  Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via atom table exhaustion when parsing attacker-controlled GraphQL SDL. Multiple Blueprint.Draft.convert/2 implementations