PT-2026-145404

CVE-2026-64861

Published

2026-11-11

Updated

2026-11-11

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Probo versions prior to 0.222.0

Description The GraphQL endpoint does not enforce restrictions on alias count, query depth, or query complexity. This allows an attacker to send a single request containing thousands of aliased resolver calls, leading to excessive server-side resource consumption and service degradation.

Recommendations Update to version 0.222.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Muthu-Devarajan

Vendors

Affected products

Weakness enumeration

CWE-770: Allocation of Resources Without Limits or Throttling

Related identifiers