Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

absinthe

Ecosystem:
hex
Package URL:
pkg:hex/absinthe
Total PRs:
26 Dependabot PRs
Latest PR:
11 days ago
Unique Repositories:
19 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Atom table exhaustion via attacker-controlled GraphQL SDL names in absinthe
EEF-CVE-2026-42793 GHSA-qf4g-9fqq-mmm7 CVE-2026-42793 HIGH published about 1 month ago • updated 3 days ago
## Summary Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allows unauthenticated denial of servic...
Quadratic fragment-name uniqueness check causes denial of service in absinthe
EEF-CVE-2026-43967 GHSA-9mhv-8h52-q7q2 CVE-2026-43967 HIGH published about 1 month ago • updated about 1 month ago
## Summary Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fr...
Absinthe: Quadratic fragment-name uniqueness check
GHSA-9mhv-8h52-q7q2 CVE-2026-43967 HIGH published 28 days ago • updated 1 day ago
### Summary An unauthenticated attacker can stall an Absinthe-backed GraphQL endpoint by submitting a query that contains many fragment definitions...
Absinthe: Unbounded atom creation from parsed directive name
GHSA-qf4g-9fqq-mmm7 CVE-2026-42793 HIGH published 28 days ago • updated 1 day ago
### Summary When Absinthe parses a GraphQL SDL document, every `directive @<name>` definition is converted into a freshly created atom without any ...
Recent PRs
RSS Feed
chore(deps): bump the production-dependencies group with 7 updates

ash-project/ash_graphql #440

1.10.0 → 1.10.2 Patch PR
Closed 11 days ago 2 comments
ash-project
chore(deps): bump absinthe from 1.9.0 to 1.9.1

piyyy314/blockscout313 #82

1.9.0 → 1.9.1 Patch PR
Closed 3 months ago 1 comment
piyyy314
chore(deps): bump absinthe from 1.7.10 to 1.9.0

raul-gracia/ash_phoenix_translations #32

1.7.10 → 1.9.0 Minor PR
Open 5 months ago 5 comments
raul-gracia
Bump the production-dependencies group across 1 directory with 12 updates

ringvold/get5_api #190

1.7.9 → 1.9.0 Minor PR
Closed 6 months ago 1 comment
ringvold
Bump the production-dependencies group across 1 directory with 14 updates

ringvold/get5_api #185

1.7.9 → 1.7.10 Patch PR
Open 9 months ago
ringvold
Bump the production-dependencies group across 1 directory with 12 updates

ringvold/get5_api #181

1.7.9 → 1.7.10 Patch PR
Open 10 months ago 1 comment
ringvold
Bump the production-dependencies group with 11 updates

ringvold/get5_api #179

1.7.9 → 1.7.10 Patch PR
Open 10 months ago
ringvold
Bump absinthe from 1.7.9 to 1.7.10

SafeerMohamed/blockscout-backend #18

1.7.9 → 1.7.10 Patch PR
Open 10 months ago
SafeerMohamed
Bump absinthe from 1.7.9 to 1.7.10

ygpark2/elixir_pheonix_app #10

1.7.9 → 1.7.10 Patch PR
Open 11 months ago
ygpark2
Bump absinthe from 1.7.9 to 1.7.10

TommyBuiJR/blockscout #24

1.7.9 → 1.7.10 Patch PR
Open 11 months ago
TommyBuiJR
Bump the production-dependencies group with 7 updates

ringvold/get5_api #178

1.7.9 → 1.7.10 Patch PR
Closed 11 months ago 1 comment
ringvold
Bump absinthe from 1.7.8 to 1.7.10

ozonechainofficial/ozone_explorer #16

1.7.8 → 1.7.10 Patch PR
Open 11 months ago
ozonechainofficial
Bump absinthe from 1.7.6 to 1.7.10

siwapp/siwapp #90

1.7.6 → 1.7.10 Patch PR
Open 11 months ago
siwapp
Bump absinthe from 1.7.9 to 1.7.10

primait/opentelemetry_absinthe #199

1.7.9 → 1.7.10 Patch PR
Merged 12 months ago
primait
Bump absinthe from 1.7.9 to 1.7.10

primait/auth0_ex #282

1.7.9 → 1.7.10 Patch PR
Open 12 months ago
primait
chore(deps): bump absinthe from 1.7.9 to 1.7.10

oasysgames/blockscout-v8-backend #12

1.7.9 → 1.7.10 Patch PR
Open about 1 year ago
oasysgames
deps(deps): bump absinthe from 1.7.9 to 1.7.10

customeros/core #432

1.7.9 → 1.7.10 Patch PR
Open about 1 year ago 1 comment
customeros
chore(deps): bump absinthe from 1.7.9 to 1.7.10

insoblok/insoscope #10

1.7.9 → 1.7.10 Patch PR
Open about 1 year ago
insoblok
Bump absinthe from 1.7.9 to 1.7.10 in /app

nulib/meadow #4639

1.7.9 → 1.7.10 Patch PR
Merged about 1 year ago
nulib
Bump absinthe from 1.7.9 to 1.7.10

jutonz/homepage #3713

1.7.9 → 1.7.10 Patch PR
Merged about 1 year ago
jutonz
Bump absinthe from 1.7.9 to 1.7.10

ambry-app/ambry #1070

1.7.9 → 1.7.10 Patch PR
Merged about 1 year ago
ambry-app
build(deps): bump absinthe from 1.7.9 to 1.7.10

Byzanteam/jet-plugin-sdk #130

1.7.9 → 1.7.10 Patch PR
Merged about 1 year ago
Byzanteam
chore(deps): bump absinthe from 1.7.8 to 1.7.10

Elparadisogonzalo/blockscout #102

1.7.8 → 1.7.10 Patch PR
Open about 1 year ago
Elparadisogonzalo
chore(deps): bump absinthe from 1.7.8 to 1.7.9

Elparadisogonzalo/blockscout #83

1.7.8 → 1.7.9 Patch PR
Closed about 1 year ago 1 comment
Elparadisogonzalo
Bump the production-dependencies group across 1 directory with 16 updates

ringvold/get5_api #176

1.7.8 → 1.7.9 Patch PR
Open about 1 year ago 2 comments
ringvold
Package Details
Name: absinthe
Ecosystem: hex
PURL Type: hex
Package URL: pkg:hex/absinthe
JSON API: View JSON
Security Advisories

4

Active advisories
HIGH 4
View All hex Advisories
Package Information
Description:

GraphQL for Elixir

Repository: https://github.com/absinthe-graphql/absinthe
Homepage: https://github.com/absinthe-graphql/absinthe/blob/main/CHANGELOG.md
Latest Release: 1.7.8
almost 2 years ago
Dependent Repos: 1,257
Dependent Packages: 79
Downloads: 38,142,246
Ranking: Top 0.4239% by dependent repos Top 0.668% by downloads Top 0.3212% by dependent pkgs
PR Status
Open 15 (57.7%)
Merged 5 (19.2%)
Closed 5 (19.2%)
PR Types
Minor 2 (7.7%)
Patch 23 (88.5%)