Asymmetric denial of service In async-graphql
Description
async-graphql Directive Overload
Impact
Service Disruption: The server may become unresponsive or extremely slow, potentially leading to downtime.
Resource Exhaustion: Excessive use of server resources, such as CPU and memory, could negatively impact other services running on the same infrastructure.
User Experience Degradation: Users may experience delays or failures when accessing the service, which could lead to frustration and loss of trust in the service.
Patches
Upgrade to v7.0.10
Use SchemaBuilder.limit_directives to limit the maximum number of directives for a single field.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 cargo | 7.0.10 |
Aliases
References