VulertSecurity VulertSecurity

Vulnerability Database · Maven · Package report

com.graphql-java:graphql-java: vulnerability history, versions and safety

com.graphql-java:graphql-java is a package in the Maven ecosystem. Vulert records 3 vulnerabilities for it across 116 releases, from Sep 2022 to Jul 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
3 vulnerabilities recorded H3
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all com.graphql-java:graphql-java vulnerabilities

Vulert verdict on com.graphql-java:graphql-java 230521-nf-execution i

Updated on 23 Oct 2026

Every vulnerability Vulert records for this package has a fix, and the newest was recorded 30 Jul 2024. Apply the fixes listed below and you are clear.

Package health score 80/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Niche
  • Community Moderate

What to do: Move the affected dependencies to the fixed versions listed below, then keep the package monitored so the next vulnerability reaches you. Fix it, then keep watch: Vulert alerts you when a new vulnerability affects the version you run. Monitor it with Vulert →

  • Current release 230521-nf-execution — unaffected i
  • Vulnerabilities on record 3 over 1 year · 0 in the last year i
  • Latest disclosure 30 Jul 2024 i
  • Highest CVSS 7.5 i
  • With no published fix 0 i
  • Depended on by 9 packages i
  • Stars 6,221 i
  • OpenSSF scorecard 5/10 i
  • Last release this month i
  • Licence MIT i

Version list, release dates, licence and dependants published by Maven Central, refreshed 22 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for com.graphql-java:graphql-java, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
0.0.0-2026-10-21T07-14-16-d559f3c 21 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-21T05-25-04-3fd2dfe 21 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-20T03-01-53-c083356 20 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-20T02-19-52-20cdace 20 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-19T06-43-12-4158b45 19 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-19T05-49-56-c0a05ed 19 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-19T05-01-14-4ac19b4 19 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-19T04-21-30-ec73202 19 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-09T23-43-44-d1ce250 09 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-09T04-41-40-44d18ac 09 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-05T23-46-24-5acdd81 05 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-02T05-05-52-2d3ef90 02 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-10-02T00-28-19-a78f62f 02 Oct 2026 H2 MIT Yes Details →
0.0.0-2026-09-29T03-23-50-a382c0f 29 Sep 2026 H2 MIT Yes Details →
0.0.0-2026-09-21T23-41-00-d74b12c 21 Sep 2026 H2 MIT Yes Details →
26.1 24 Aug 2026 none MIT — Details →
25.1 24 Aug 2026 none MIT — Details →
24.4 24 Aug 2026 none MIT — Details →
0.0.0-2026-08-23T10-34-47-acc4678 23 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-23T10-21-08-5a77294 23 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-22T22-02-25-ff464f4 22 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-22T22-00-17-963aada 22 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-22T21-56-18-336c594 22 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-20T22-21-40-c5c20fd 20 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-20T00-33-00-ad5b1fc 20 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-14T02-10-46-caf4d79 14 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-05T20-12-54-bc41471 05 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-04T02-28-34-31261a4 04 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-03T01-34-16-abbb922 03 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-08-03T01-33-40-efcb944 03 Aug 2026 H2 MIT Yes Details →
0.0.0-2026-07-24T04-26-07-80e8294 24 Jul 2026 H2 MIT Yes Details →
0.0.0-2026-07-21T23-08-04-6046d9e 21 Jul 2026 H2 MIT Yes Details →
0.0.0-2026-05-29T07-49-37-79b227e 29 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-23T05-45-40-058d3bb 23 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-21T00-54-48-e4432bf 21 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T09-47-14-26648a3 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T09-01-30-c8861b0 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T08-42-21-3b03d75 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T08-02-31-1fce25b 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T07-21-25-811e7f4 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T06-02-25-790627d 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T01-08-52-a53a129 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-20T01-05-29-7e0b1c1 20 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-19T10-11-43-a943664 19 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-19T05-53-11-b46b764 19 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-19T01-41-25-157c7cc 19 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-18T22-36-48-5d914f1 18 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-18T22-22-19-a541c23 18 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-14T04-13-42-bd529fb 14 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-12T01-33-43-16153d0 12 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-10T11-05-39-cb6c245 10 May 2026 H2 MIT Yes Details →
0.0.0-2026-05-09T22-32-45-42e73c2 09 May 2026 H2 MIT Yes Details →
26.0 23 Apr 2026 none MIT — Details →
0.0.0-2026-04-23T01-03-16-95f49d9 23 Apr 2026 H2 MIT Yes Details →
0.0.0-2026-04-23T00-45-29-a6cc631 23 Apr 2026 H2 MIT Yes Details →
0.0.0-2026-04-23T00-34-44-c86eb07 23 Apr 2026 H2 MIT Yes Details →
0.0.0-2026-04-22T23-52-11-aafbbd5 22 Apr 2026 H2 MIT Yes Details →
0.0.0-2026-04-03T19-59-33-3e15aed 03 Apr 2026 H2 MIT Yes Details →
0.0.0-2026-03-31T19-36-15-cf332d8 31 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-23T01-41-05-0e77994 23 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-22T06-34-54-e3d076b 22 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-22T04-00-19-ee007b0 22 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-22T03-21-42-87ab05e 22 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-21T04-35-53-53c0c82 21 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-19T07-22-04-58aaa22 19 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-18T00-52-57-e53ab1a 18 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-16T01-30-06-6d6a262 16 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-14T05-26-52-cfae17e 14 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-11T01-27-48-addabba 11 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-11T01-24-33-04a7236 11 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-10T23-55-11-a3ff5aa 10 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-10T19-38-32-8fff72e 10 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-10T19-34-15-30797cf 10 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-10T19-32-12-e10006a 10 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-10T19-31-14-a1be996 10 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T22-31-14-1cca8ee 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T22-24-55-a12be23 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T20-42-06-cf536bd 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T19-06-20-5e83c1b 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T17-35-55-1babf52 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-09T02-38-08-426a2cc 09 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-08T23-32-02-761df31 08 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-08T03-36-51-bd3914d 08 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-08T02-24-41-5e00d10 08 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T23-09-31-869f7b4 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T23-03-53-b4972e3 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T22-03-29-a21610f 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-41-01-ef5b6f8 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-40-01-2d1e22a 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-38-46-13c65c9 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-33-49-ac6412f 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-33-29-222ee3c 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-33-29-48a5d08 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T20-32-57-d3fbf2d 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-07T14-27-54-f679e89 07 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-55-29-beab3ac 06 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-49-14-c3776dc 06 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-48-19-d35ac50 06 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-47-55-05dedc7 06 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-38-34-4521178 06 Mar 2026 H2 MIT Yes Details →
0.0.0-2026-03-06T22-31-52-483f0d3 06 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-06T22-19-51-00aa746 06 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-06T21-14-48-bd5d21b 06 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-06T19-58-06-ec31e0b 06 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-05T12-00-37-0b8d2ae 05 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-05T11-47-10-e533fec 05 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-04T23-50-31-c8a9d18 04 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-04T23-20-34-3924d86 04 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-04T20-48-44-5273839 04 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-04T15-19-42-5b63591 04 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-02T08-47-45-32c996c 02 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-02T07-49-06-a0449b5 02 Mar 2026 H2 — Yes Details →
0.0.0-2026-03-02T07-41-11-bae794f 02 Mar 2026 H2 — Yes Details →
0.0.0-2026-02-28T21-58-00-739403f 28 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-27T22-55-54-1e867c2 27 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-25T19-49-13-9116159 25 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-24T19-39-22-bdd53e6 24 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-23T19-45-34-2b0ef6f 23 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-23T04-45-24-30e0cb4 23 Feb 2026 H2 — Yes Details →
0.0.0-2026-02-22T23-03-25-f7a2377 22 Feb 2026 H2 — Yes Details →

The newest 120 of 1,698 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 1
  • 2023 1
  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 3 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for com.graphql-java:graphql-java

The 3 most severe of 3 vulnerabilities recorded for this package

Search all 3 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2022-37734: Denial of Service via GraphQL query in graphql-java 7.5 high 17.4 13 Sep 2022
CVE-2023-28867: GraphQL Java - Stack Consumption Vulnerability 7.5 high 0.0.0-2023-03-20T01-49-44-80e3135 27 Mar 2023
CVE-2024-40094: Denial of Service Vulnerability in GraphQL Java 7.5 high 19.11 30 Jul 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About com.graphql-java:graphql-java

Is com.graphql-java:graphql-java safe to use?

Vulert records 3 vulnerabilities for com.graphql-java:graphql-java in Maven: 0 critical, 3 high, 0 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is com.graphql-java:graphql-java's Vulert package health score?

Vulert scores com.graphql-java:graphql-java 80/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of com.graphql-java:graphql-java should I use?

230521-nf-execution is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does com.graphql-java:graphql-java have?

3 vulnerabilities are recorded for com.graphql-java:graphql-java in the Maven ecosystem: 0 critical, 3 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new com.graphql-java:graphql-java vulnerabilities disclosed?

0 vulnerabilities were recorded for com.graphql-java:graphql-java in the last 12 months, and the oldest entry in this database dates to 13 Sep 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of com.graphql-java:graphql-java are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor com.graphql-java:graphql-java for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the com.graphql-java:graphql-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.