CVE-2022-37315: Graphql-Go Project Graphql-Go

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser.

Affected products

• Graphql-Go Project Graphql-Go: up to and including 0.8.0

Published 2022-08-01. Last modified 2026-08-25.