CVE-2024-40094

Name of the Vulnerable Software and Affected Versions GraphQL Java versions prior to 21.5 GraphQL Java version 20.9 GraphQL Java version 19.11

Description The issue is related to the improper consideration of ExecutableNormalizedFields (ENFs) in preventing denial of service via introspection queries. This can lead to a denial of service.

Recommendations For versions prior to 21.5, update to version 21.5 or later to resolve the issue. For version 20.9, no additional action is required as it is a fixed version. For version 19.11, no additional action is required as it is a fixed version.