GHSA-jfgf-vvcv-mf69

Facts

Severity

High · CVSS score 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected versions (io.smallrye:smallrye-graphql)

<=2.18.4As entered by the maintainer. Not reviewed.

Fixed in (io.smallrye:smallrye-graphql)

2.18.5

Affected versions (io.smallrye:smallrye-graphql)

<=2.17.0As entered by the maintainer. Not reviewed.

Fixed in (io.smallrye:smallrye-graphql)

2.17.1

Affected versions (io.smallrye:smallrye-graphql)

<=2.14.2As entered by the maintainer. Not reviewed.

Fixed in (io.smallrye:smallrye-graphql)

2.14.3

Affected versions (io.smallrye:smallrye-graphql)

<=2.13As entered by the maintainer. Not reviewed.

Fixed in (io.smallrye:smallrye-graphql)

not stated

CVE

CVE-2026-76763 · published

GitHub Advisory Database

Not reviewed

OSV.dev

Not present

Other CVEs pointing here

None found in the CVE List

Timeline

1. 2026-08-31 13:42 UTC

   Published by the maintainers

   Cites CVE-2026-76763

2. 2026-11-09 16:42 UTC

   First seen by Limbowatch

   not reviewed · not in OSV

3. Waiting

   Reviewed by GitHub

4. Waiting

   In OSV; scanners can see it

Machine-readable record: feed/GHSA-jfgf-vvcv-mf69.json