Advisories for packages from webonyx

Listing reported advisories for packages from webonyx sorted by their report date.

webonyx/graphql-php has unbounded recursion in parser that causes stack overflow on crafted nested input
GitHub

webonyx/graphql-php

<= 15.32.2

2026-05-05 17:24:58
webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments
GitHub

webonyx/graphql-php

< 15.32.2

2026-05-04 22:22:11
graphql-php is affected by a Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation
GitHub

webonyx/graphql-php

<= 15.31.4

2026-04-14 01:05:07

Need help?

We are happy to help you with any questions you might have.

Documentation Roadmap Report a bug Get in touch