CVE-2026-107376 - webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input
CVE ID :CVE-2026-107376 Published : Oct. 8, 2026, 6:17 p.m. | 1 hour, 12 minutes ago Description :webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSelectionSet,...