Deeply nested fragments in a GraphQL request may cause a stack overflow in the server.
meskill / mystic-light-sdk
This project might be open to known security vulnerabilities, which can be prevented by tightening the version range of affected dependencies. Find detailed information at the bottom.
mystic_light_sdk
(9 total, 3 outdated, 1 possibly insecure)
Crate | Required | Latest | Status |
---|---|---|---|
async-graphql ⚠️ | ^4.0.1 | 7.0.11 | out of date |
custom_error | ^1.9.2 | 1.9.2 | up to date |
either | ^1.7.0 | 1.13.0 | up to date |
libloading | ^0.7.3 | 0.8.5 | out of date |
oaidl | ^0.2.1 | 0.2.1 | up to date |
serde | ^1.0.137 | 1.0.215 | up to date |
tracing | ^0.1.36 | 0.1.40 | up to date |
widestring | ^0.4.3 | 1.1.0 | out of date |
winapi | ^0.3.9 | 0.3.9 | up to date |
(2 total, all up-to-date)
Crate | Required | Latest | Status |
---|---|---|---|
serde_json | ^1.0.81 | 1.0.133 | up to date |
tracing-subscriber | ^0.3.15 | 0.3.18 | up to date |
(1 total, all up-to-date)
Crate | Required | Latest | Status |
---|---|---|---|
copy_dir | ^0.1.2 | 0.1.3 | up to date |
async-graphql
: Denial of service on deeply nested fragment requestsDeeply nested fragments in a GraphQL request may cause a stack overflow in the server.