From a51da9abb4ffab471d42aff01061ea1f2fce067c Mon Sep 17 00:00:00 2001 From: Claude Date: Sun, 7 Dec 2025 16:53:26 +0000 Subject: [PATCH] Fix async-graphql directive overload vulnerability (CVE) Update async-graphql and async-graphql-axum from 6.0 to 7.0.10 to address the directive overload security vulnerability. Versions prior to 7.0.10 are susceptible to service disruption and resource exhaustion. Fixes Dependabot alert #1 --- src/rust/Cargo.toml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/rust/Cargo.toml b/src/rust/Cargo.toml index 31a3046..1e181f8 100644 --- a/src/rust/Cargo.toml +++ b/src/rust/Cargo.toml @@ -44,8 +44,8 @@ criterion = { version = "0.5", optional = true } rayon = "1.8" # GraphQL server (optional) -async-graphql = { version = "6.0", optional = true } -async-graphql-axum = { version = "6.0", optional = true } +async-graphql = { version = "7.0.10", optional = true } +async-graphql-axum = { version = "7.0.10", optional = true } axum = { version = "0.7", optional = true } [dev-dependencies]