Graphql Modules
Approved changes feed: RSS · Atom
cpe:2.3:a:graphql-hive:graphql-modules:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Graphql Hive (fdb0b663-3ce9-50a1-999d-ab1a9696bd22) |
|---|---|
| Product | Graphql Modules (dd452c67-432c-5595-b583-0badb7fb6b2b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-23735 |
vulnerable | 2026-06-08 07:51:16.064813 |
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in graphql-modules
GraphQL Modules is a toolset of libraries and guidelines dedicated to create reusable, maintainable, testable and extendable modules out of your GraphQL server. From 2.2.1 to before 2.4.1 and 3.1.1, when 2 or more parallel requests are made which trigger the same service, the context of the requests is mixed up in the service when the context is injected via @ExecutionContext(). ExecutionContext is often used to pass authentication tokens from incoming requests to services loading data from backend APIs. This vulnerability is fixed in 2.4.1 and 3.1.1.
Published: 2026-01-16T20:04:19.672Z
Updated: 2026-01-16T20:28:19.571Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.