Graphql-python vulnerabilities
We track 3 vulnerabilities in Graphql-python products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
Latest Graphql-python vulnerabilities
- 7.5 High severity
graphql-core: Uncontrolled Resource Consumption
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.3.0a3 until 3.3.1, validate() reuses a module-level ValidationAbortedError when a document exceeds max_errors. Python appends frames to the reused exception's traceback on every r
- 7.5 High severity
graphql-core: Uncontrolled Resource Consumption
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips comments. Each skipped com
- 7.5 High severity
graphql-core: Uncontrolled Resource Consumption
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively re-compares flattened