high7.5
CVE-2026-119286Fix available
GraphQL-core: Denial of service via memory leak in aborted validations
graphql-core PyPI
| Affected range | Recorded fix |
|---|---|
| From 3.3.0a3 before 3.3.1Ecosystem versions | 3.3.1 |
Version evidence: OSV · GHSA-mpqx-q82w-9x46
View original version evidence
{
"ranges": [
{
"events": [
{
"introduced": "3.3.0a3"
},
{
"fixed": "3.3.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.3.0",
"3.3.0a10",
"3.3.0a11",
"3.3.0a12",
"3.3.0a13",
"3.3.0a14",
"3.3.0a3",
"3.3.0a4",
"3.3.0a5",
"3.3.0a6",
"3.3.0a7",
"3.3.0a8",
"3.3.0a9",
"3.3.0b0",
"3.3.0b1",
"3.3.0b2",
"3.3.0rc0",
"3.3.0rc1"
]
}