Back to Database
Status published
High
CVE-2024-47614
async-graphql vulnerable to Directive Overload
Vulnerability Description
async-graphql is a GraphQL server library implemented in Rust. async-graphql before 7.0.10 does not limit the number of directives for a field. This can lead to Service Disruption, Resource Exhaustion, and User Experience Degradation. This vulnerability is fixed in 7.0.10.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-47614
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
async-graphql
View all reports →Affected Software
async-graphql
Vulnerable Versions:
< 7.0.10
Timeline
Official Publish:
October 3rd, 2024
Last Modified:
October 3rd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H