VulnerableCode Package Details - pkg:maven/com.graphql-java/graphql-java@2.2.0

Search for packages

Vulnerability	Summary	Fixed by
VCID-a88m-weu1-ebfs Aliases: CVE-2024-40094 GHSA-h9mq-f6q5-6c8m		19.11 Affected by 0 other vulnerabilities. 20.9 Affected by 0 other vulnerabilities. 21.5 Affected by 0 other vulnerabilities.
VCID-f2j5-menf-5khz Aliases: CVE-2022-37734 GHSA-v62j-cxhh-fq22		17.4 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 18.3 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-m121-a6nq-cbc6 Aliases: CVE-2023-28867 GHSA-p4qx-6w5p-4rj2	GraphQL Java vulnerable to stack consumption In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4 and 17.5.	17.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 18.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 19.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 20.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-a88m-weu1-ebfs
Aliases:
CVE-2024-40094
GHSA-h9mq-f6q5-6c8m

19.11
Affected by 0 other vulnerabilities.

20.9
Affected by 0 other vulnerabilities.

21.5
Affected by 0 other vulnerabilities.

VCID-f2j5-menf-5khz
Aliases:
CVE-2022-37734
GHSA-v62j-cxhh-fq22

17.4
Affected by 2 other vulnerabilities.

18.3
Affected by 2 other vulnerabilities.

VCID-m121-a6nq-cbc6
Aliases:
CVE-2023-28867
GHSA-p4qx-6w5p-4rj2

GraphQL Java vulnerable to stack consumption In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4 and 17.5.

17.5
Affected by 1 other vulnerability.

18.4
Affected by 1 other vulnerability.

19.4
Affected by 1 other vulnerability.

20.1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-01T08:11:08.504773+00:00	GitLab Importer	Affected by	VCID-a88m-weu1-ebfs	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2024-40094.yml	38.6.0
2026-06-01T07:22:18.305894+00:00	GitLab Importer	Affected by	VCID-m121-a6nq-cbc6	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2023-28867.yml	38.6.0
2026-06-01T07:02:23.425652+00:00	GitLab Importer	Affected by	VCID-f2j5-menf-5khz	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2022-37734.yml	38.6.0