graphql-php vulnerabilities
CVEs whose affected-version data names the graphql-php package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-107376High· 8.2PoCwebonyx graphql-php is a PHP implementation of the GraphQL specification
webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet, parseValueLiteral, and parseTypeReference. A r…
▾ Midnightwebonyx · graphql-phpEPSS 0.45%via NVD
CVE-2026-40476High· 7.5graphql-go is a Go implementation of GraphQL
graphql-go is a Go implementation of GraphQL. In versions 15.31.4 and below, the OverlappingFieldsCanBeMerged validation rule performs O(n²) pairwise comparisons of fields sharing the same response name. An attacker can send a query with…
▾ Twilightwebonyx · graphql-phpEPSS 0.64%via NVD