What’s Vulnerable › Products

graphql-python graphql-core vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your graphql-python graphql-core version is affected

Latest graphql-python graphql-core vulnerabilities

• CVE-2026-119286 — GraphQL-core: Denial of service via memory leak in aborted validations (CVSS 7.5)
• CVE-2026-75507 — GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule (CVSS 7.5)
• CVE-2026-75508 — GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit (CVSS 7.5)