advisory-db/crates/async-graphql/RUSTSEC-2022-0037.md

[advisory]
id = "RUSTSEC-2022-0037"
package = "async-graphql"
date = "2022-07-21"
url = "https://github.com/async-graphql/async-graphql/commit/521769b80039fc8043d1c9883e3d6e5b57359072"
categories = ["denial-of-service"]
cvss = "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
aliases = ["GHSA-xq3c-8gqm-v648"]
related = ["GHSA-4rx6-g5vg-5f3j"]

[versions]
patched = [">= 4.0.6"]

Denial of service on deeply nested fragment requests

Deeply nested fragments in a GraphQL request may cause a stack overflow in the server.