webonyx
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| graphql-php | 2 | – | Oct 8, 2026 |
Exploited and recent CVEs
- CVE-2026-107376 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input 0.4%
- CVE-2026-40476 graphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation 0.6%