Webonyx vulnerabilities
We track 2 vulnerabilities in Webonyx products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Webonyx vulnerabilities
- 8.2 High severity
graphql-php: Uncontrolled Recursion
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A remote attacker can subm
- 7.5 High severity
graphql-php: Inefficient Algorithmic Complexity
graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the OverlappingFieldsCanBeMerged validation rule performs O(n²) pairwise comparisons of fields sharing the same response name. An attacker can send a query with thousands of repeated