CyberSecBulletin

ChilliCream vulnerabilities

We track 1 vulnerability in ChilliCream products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 18, 2026.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest ChilliCream vulnerabilities

  • 9.1 Critical severity

    graphql-platform: Uncontrolled Recursion

    CVE-2026-40324ChilliCream

    Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser `Utf8GraphQLParser` has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, ob