Executive brief
webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input
Affected products
- Packagist webonyx/graphql-php
Junglewise Threat Intelligence
webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input
Severity: low · CVSS 3.1 · Published 2026-05-05
Technologies: webonyx/graphql-php (Packagist). Vendors: Packagist.