CVE-2024-47614 — async-graphql vulnerable to Directive Overload
async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disrupti…
Published: 2024-10-03 · CVSS: 7.5 · CVSS 3.1
async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7