Skip to content
Threat Feed
Subscribe

Product

Hot Chocolate

1 brief RSS
critical advisory

ChilliCream GraphQL Platform Stack Overflow via Deeply Nested GraphQL Documents

ChilliCream GraphQL Platform is vulnerable to a stack overflow exception due to unbounded recursion depth in the Utf8GraphQLParser; a crafted GraphQL document with deeply nested elements can trigger a StackOverflowException, terminating the worker process.

Hot Chocolate graphql stack-overflow denial-of-service hotchocolate
3r 3t