Skip to content
Threat Feed
Subscribe

Vendor

Traggo

1 brief RSS
medium advisory

Traggo Server: Unauthenticated Denial of Service via GraphQL Alias Overloading (CVE-2026-117184)

Traggo server v0.8.3 is vulnerable to an unauthenticated Denial of Service due to a lack of complexity and size limits on the /graphql endpoint, allowing attackers to exhaust CPU and memory resources.

Traggo server denial-of-service graphql webserver
1r 1t 1c