VulnerableCode Package Details - pkg:maven/com.graphql-java/graphql-java@17.4

Search for packages

Vulnerability	Summary	Fixed by
VCID-a88m-weu1-ebfs Aliases: CVE-2024-40094 GHSA-h9mq-f6q5-6c8m		19.11 Affected by 0 other vulnerabilities. 20.9 Affected by 0 other vulnerabilities. 21.5 Affected by 0 other vulnerabilities.
VCID-m121-a6nq-cbc6 Aliases: CVE-2023-28867 GHSA-p4qx-6w5p-4rj2	GraphQL Java vulnerable to stack consumption In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4 and 17.5.	17.5 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 18.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 19.4 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 20.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-a88m-weu1-ebfs
Aliases:
CVE-2024-40094
GHSA-h9mq-f6q5-6c8m

19.11
Affected by 0 other vulnerabilities.

20.9
Affected by 0 other vulnerabilities.

21.5
Affected by 0 other vulnerabilities.

VCID-m121-a6nq-cbc6
Aliases:
CVE-2023-28867
GHSA-p4qx-6w5p-4rj2

GraphQL Java vulnerable to stack consumption In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4, 18.4 and 17.5.

17.5
Affected by 1 other vulnerability.

18.4
Affected by 1 other vulnerability.

19.4
Affected by 1 other vulnerability.

20.1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
VCID-f2j5-menf-5khz		CVE-2022-37734 GHSA-v62j-cxhh-fq22

Vulnerability

Summary

Aliases

VCID-f2j5-menf-5khz

CVE-2022-37734
GHSA-v62j-cxhh-fq22

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-01T08:11:08.678387+00:00	GitLab Importer	Affected by	VCID-a88m-weu1-ebfs	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2024-40094.yml	38.6.0
2026-06-01T07:22:18.463204+00:00	GitLab Importer	Affected by	VCID-m121-a6nq-cbc6	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2023-28867.yml	38.6.0
2026-06-01T07:02:23.682808+00:00	GitLab Importer	Fixing	VCID-f2j5-menf-5khz	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.graphql-java/graphql-java/CVE-2022-37734.yml	38.6.0
2026-05-31T11:20:49.341472+00:00	GithubOSV Importer	Fixing	VCID-f2j5-menf-5khz	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/09/GHSA-v62j-cxhh-fq22/GHSA-v62j-cxhh-fq22.json	38.6.0
2026-05-31T00:59:59.856710+00:00	GHSA Importer	Fixing	VCID-f2j5-menf-5khz	https://github.com/advisories/GHSA-v62j-cxhh-fq22	38.6.0