Executive brief
webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments
Affected products
- Packagist webonyx/graphql-php
Junglewise Threat Intelligence
webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments
Severity: low · CVSS 3.1 · Published 2026-05-04
Technologies: webonyx/graphql-php (Packagist). Vendors: Packagist.