Skip to content
Threat Feed

Product

Absinthe (>= 1.5.0, < 1.10.2)

1 brief RSS
medium advisory

Absinthe GraphQL Atom Table Exhaustion Vulnerability

Absinthe versions 1.5.0 before 1.10.2 are vulnerable to a denial-of-service attack (CVE-2026-42793) due to unbounded atom creation when parsing GraphQL SDL documents, allowing an attacker to exhaust the Erlang VM's atom table and crash the entire node by submitting a crafted document with numerous unique directive names.

absinthe denial-of-service graphql atom-table-exhaustion
2r 1t 1c