How severe is CVE-2025-31496?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.5 out of 10.

What type of vulnerability is CVE-2025-31496?

This is classified as CWE-770, which is a common weakness in software security.

CVE-2025-31496 - HIGH Severity | CVSS 7.5

Vulnerability Description

apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Compiler allowed queries with deeply nested and reused named fragments to be prohibitively expensive to validate. Named fragments were being processed once per fragment spread in some cases during query validation, leading to exponential resource usage when deeply nested and reused fragments were involved. This could lead to excessive resource consumption and denial of service in applications. This vulnerability is fixed in 1.27.0.

Related Vulnerabilities

CVE-2016-20013

HIGH

CVSS:7.5(High)

sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.

CWE-7702016

CVE-2016-4074

HIGH

CVSS:7.5(High)

The jv_dump_term function in jq 1.5 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. This issue has been fixed in jq 1.6_rc1-r0.

CWE-7702016

CVE-2017-11468

HIGH

CVSS:7.5(High)

Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remote attackers to cause a denial of service (memory consumptio...

CWE-7702017

CVE-2017-1227

HIGH

CVSS:7.5(High)

IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.

CWE-7702017

CVE-2017-12429

HIGH

CVSS:7.5(High)

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to cause a denial of service.

CWE-7702017

CVE-2017-12430

HIGH

CVSS:7.5(High)

In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to cause a denial of service.

CWE-7702017