CVE-2024-47614

async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10.

• CWE-770

• https://github.com/async-graphql/async-graphql/commit/7f1791488463d4e9c5adcd543962173e2f6cbd34
• https://github.com/async-graphql/async-graphql/security/advisories/GHSA-5gc2-7c65-8fq8

Published

Oct 3, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47609Tonic is a native gRPC client & server implementation with a…6.9
• CVE-2024-4761Out of bounds write in V8 in Google Chrome prior to 124.0.63…8.8
• CVE-2024-47610InvenTree is an Open Source Inventory Management System. In …5.4
• CVE-2024-47611XZ Utils provide a general-purpose data-compression library …6.3
• CVE-2024-47612DataDump is a MediaWiki extension that provides dumps of wik…3.5
• CVE-2024-47613GStreamer is a library for constructing graphs of media-hand…9.8
• CVE-2024-47615GStreamer is a library for constructing graphs of media-hand…9.8
• CVE-2024-47616Pomerium is an identity and context-aware access proxy. The …6.8
• CVE-2024-47617Sulu is a PHP content management system. This vulnerability …6.1
• CVE-2024-47618Sulu is a PHP content management system. Sulu is vulnerable …5.4
• CVE-2024-47619syslog-ng is an enhanced log daemo. Prior to version 4.8.2, …7.5
• CVE-2024-4762An improper validation vulnerability was reported in the fir…7.8