CVE-2024-47614: async-graphql Directive Overload

October 3, 2024

Service Disruption: The server may become unresponsive or extremely slow, potentially leading to downtime.
Resource Exhaustion: Excessive use of server resources, such as CPU and memory, could negatively impact other services running on the same infrastructure.
User Experience Degradation: Users may experience delays or failures when accessing the service, which could lead to frustration and loss of trust in the service.

References

github.com/advisories/GHSA-5gc2-7c65-8fq8
github.com/async-graphql/async-graphql
github.com/async-graphql/async-graphql/commit/7f1791488463d4e9c5adcd543962173e2f6cbd34
github.com/async-graphql/async-graphql/security/advisories/GHSA-5gc2-7c65-8fq8
nvd.nist.gov/vuln/detail/CVE-2024-47614

Code Behaviors & Features

Detect and mitigate CVE-2024-47614 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →