Skip to content

Upgrade com.graphql-java:graphql-java to resolve security vulnerabilities  #1045

@upendra-vedullapalli

Description

@upendra-vedullapalli

Issue Description

This repo is vulnerable to DoS attack(CVE-2022-37734) from com.graphql-java:graphql-java:16.2

Steps to Reproduce

Run a check on dependencies list using a plugin like OWASP to list all security vulnerabilities

Expected Result

Dependency check report for vulnerabilities would list CVE-2022-37734

Actual Result

Dependency on com.graphql-java:graphql-java from version before 19.0 makes this repository vulnerable to DoS attack on parsing larger schemas

Your Environment and Setup

  • graphql-java-codegen version: 5.6.0
  • Build tool: Gradle
  • Mapping Config: Default configuration

Metadata

Metadata

Labels

bugSomething isn't working

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions