`graphql`

Ecosystem:
rubygems

Package URL:
pkg:gem/graphql

Total PRs:
1,005 Dependabot PRs

Latest PR:
28 days ago

Unique Repositories:
225 repositories

Unique Repos (30 days):
8 repositories

Security Advisories

graphql allows remote code execution when loading a crafted GraphQL schema

GHSA-q92j-grw3-h492 CVE-2025-27407 CRITICAL published over 1 year ago • updated about 4 hours ago

# Summary Loading a malicious schema definition in `GraphQL::Schema.from_introspection` (or `GraphQL::Schema::Loader.load`) can result in remote c...

GraphQL-Ruby's Ruby lexer does not count comment tokens for the purposes of max_query_string_tokens

GHSA-3h96-34p3-xm76 MODERATE published 2 months ago • updated 1 day ago

GraphQL-Ruby's `max_query_string_tokens` configuration didn't count comment tokens against the limit, allowing strings to be processed even after t...

Recent PRs

RSS Feed

Bump graphql from 2.6.1 to 2.6.3

puzler/puzler-api #4

2.6.1 → 2.6.3 Patch PR

Closed 28 days ago 2 comments

Build(deps): Bump graphql from 2.6.2 to 2.6.3

evemonk/evemonk #7913

2.6.2 → 2.6.3 Patch PR

Open about 1 month ago 1 comment

Bump graphql from 2.6.2 to 2.6.3

kairan-app/feeeed #743

2.6.2 → 2.6.3 Patch PR

Closed about 1 month ago 1 comment

Bump the bundler group across 1 directory with 12 updates

alexeyramazanov/base_app #112

2.6.1 → 2.6.2 Patch PR

Closed about 2 months ago 1 comment

Bump graphql from 2.5.23 to 2.6.2

wstevo4891/rails-graphql #12

2.5.23 → 2.6.2 Minor PR

Closed about 2 months ago 1 comment

Bump graphql from 2.5.21 to 2.6.2

SakshamKaundal/RubyQLReact #19

2.5.21 → 2.6.2 Minor PR

Closed about 2 months ago 1 comment

Bump graphql from 2.5.23 to 2.6.2

Chander3121/bakedOnDemand #12

2.5.23 → 2.6.2 Minor PR

Open about 2 months ago 2 comments

Bump graphql from 2.6.1 to 2.6.2

lakikishorsubba/rails-graphql-api #13

2.6.1 → 2.6.2 Patch PR

Closed about 2 months ago 1 comment

Bump graphql from 2.5.23 to 2.5.26 in /rails_graphql_federation/books

jeantessier/book-reviews #342

2.5.23 → 2.5.26 Patch PR

Closed 2 months ago 2 comments

Bump the minor-and-patch group across 1 directory with 17 updates

dduugg/tapioca #74

2.5.22 → 2.6.1 Minor PR

Closed 2 months ago 2 comments

Bump graphql from 2.5.8 to 2.5.26

gesteves/gateway #182

2.5.8 → 2.5.26 Patch PR

Closed 2 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.26 in the bundler group across 1 directory

manyfold3d/manyfold #6050

2.5.16 → 2.5.26 Patch PR

Open 2 months ago 1 comment

Bump graphql from 2.5.23 to 2.6.1

m-hasnat/talika #5

2.5.23 → 2.6.1 Minor PR

Closed 2 months ago 1 comment

Build(deps): Bump graphql from 2.5.24 to 2.6.0

evemonk/evemonk #7790

2.5.24 → 2.6.0 Minor PR

Open 3 months ago 1 comment

Bump graphql from 2.5.23 to 2.6.0

m-hasnat/talika #4

2.5.23 → 2.6.0 Minor PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.21 to 2.5.24

SakshamKaundal/RubyQLReact #12

2.5.21 → 2.5.24 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.18 to 2.5.24

code-creativeapps/minimal_rails_graphql_api #17

2.5.18 → 2.5.24 Patch PR

Closed 3 months ago 1 comment

Bump the bundler group across 1 directory with 4 updates

amkisko/activeadmin-graphql.rb #6

2.5.22 → 2.6.1 Minor PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.20 to 2.5.23

shunjuio/gql-chat #122

2.5.20 → 2.5.23 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.22 to 2.5.23

gamin27/kago #4

2.5.22 → 2.5.23 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.9 to 2.5.22

TonyCookey/support-system-api #44

2.5.9 → 2.5.22 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.21 to 2.5.22

elmo/graphql #7

2.5.21 → 2.5.22 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.20 to 2.5.22

paulorivera27/task-management-api #8

2.5.20 → 2.5.22 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.20 to 2.5.22

jinook929/my-ror-myapp #12

2.5.20 → 2.5.22 Patch PR

Closed 3 months ago 1 comment

Bump graphql from 2.5.20 to 2.5.22

imahungrypanda/feature-flag-service #25

2.5.20 → 2.5.22 Patch PR

Closed 4 months ago 1 comment

build(deps): bump graphql from 2.5.21 to 2.5.22

up-for-grabs/up-for-grabs.net #5669

2.5.21 → 2.5.22 Patch PR

Open 4 months ago 2 comments

Bump graphql from 2.5.20 to 2.5.22

GuiMarcelino/manager_request_api #10

2.5.20 → 2.5.22 Patch PR

Closed 4 months ago 1 comment

Bump graphql from 2.5.21 to 2.5.22

highaspirationskc/ha_web #67

2.5.21 → 2.5.22 Patch PR

Closed 4 months ago 1 comment

Bump graphql from 2.5.18 to 2.5.22

code-creativeapps/minimal_rails_graphql_api #11

2.5.18 → 2.5.22 Patch PR

Closed 4 months ago 1 comment

build(deps): bump graphql from 2.5.21 to 2.5.22

alphagov/publishing-api #3968

2.5.21 → 2.5.22 Patch PR

Open 4 months ago 1 comment

Bump graphql from 2.5.19 to 2.5.21

RaspberryPiFoundation/editor-api #738

2.5.19 → 2.5.21 Patch PR

Open 4 months ago 1 comment

Bump graphql from 2.5.20 to 2.5.21

GuiMarcelino/manager_request_api #6

2.5.20 → 2.5.21 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump graphql from 2.5.19 to 2.5.20

mocchann/rails-graphql-todo #82

2.5.19 → 2.5.20 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.19

seaki/rubicure-graphql #743

2.5.16 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.9 to 2.5.19

andreassarchosis1-max/consuldemocracy-master #125

2.5.9 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.19

Takumi-Tajima/toggl_graphql_app #12

2.5.16 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.3.19 to 2.5.19

2bo/rails_sandbox #420

2.3.19 → 2.5.19 Minor PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.19

agileapplications/myweek #9

2.5.16 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.18 to 2.5.19

code-creativeapps/minimal_rails_graphql_api #2

2.5.18 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

build(deps): bump graphql from 2.5.16 to 2.5.19

cesargomez89/showoff #10

2.5.16 → 2.5.19 Patch PR

Closed 5 months ago 1 comment

Build(deps): Bump graphql from 2.5.18 to 2.5.19

evemonk/evemonk #7494

2.5.18 → 2.5.19 Patch PR

Open 5 months ago 2 comments

chore(deps): bump graphql from 2.5.16 to 2.5.19

mocchann/rails-graphql-todo #75

2.5.16 → 2.5.19 Patch PR

Open 5 months ago 1 comment

build(deps): bump graphql from 2.5.18 to 2.5.19

alphagov/publishing-api #3866

2.5.18 → 2.5.19 Patch PR

Open 5 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.18

Syntax404-coder/nico-api #8

2.5.16 → 2.5.18 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.5.16 to 2.5.18

taylorlaekeman/goodsoup-api #8

2.5.16 → 2.5.18 Patch PR

Closed 5 months ago 1 comment

Bump graphql from 2.3.19 to 2.5.18

2bo/rails_sandbox #415

2.3.19 → 2.5.18 Minor PR

Closed 6 months ago 1 comment

chore(deps)(deps): bump the production-dependencies group across 1 directory with 5 updates

Whiskyrie/guardian_auth #28

2.5.14 → 2.5.18 Patch PR

Open 6 months ago 1 comment

Bump graphql from 2.5.11 to 2.5.18

nasubibocchi/qraphql_sample_app #39

2.5.11 → 2.5.18 Patch PR

Closed 6 months ago 1 comment

Bump graphql from 2.5.14 to 2.5.18

khattasallaman/issue_tracker_graphql #19

2.5.14 → 2.5.18 Patch PR

Closed 6 months ago 1 comment

build(deps): bump graphql from 2.5.14 to 2.5.18

Jean612/url_shortener #22

2.5.14 → 2.5.18 Patch PR

Closed 6 months ago 1 comment

Package Details

Name:	`graphql`
Ecosystem:	rubygems
PURL Type:	gem
Package URL:	`pkg:gem/graphql`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

MODERATE 1

View All gem Advisories

Package Information

Description:

A plain-Ruby implementation of GraphQL.

Repository:	https://github.com/rmosolgo/graphql-ruby
Homepage:	https://graphql-ruby.org
Latest Release:	`2.10.0` about 4 years ago
Dependent Repos:	4,698
Dependent Packages:	186
Downloads:	147,810,671
Ranking:	Top 0.4611% by dependent repos Top 0.1784% by downloads Top 0.1996% by dependent pkgs

PR Status

Open 309 (30.7%)

Merged 92 (9.2%)

Closed 450 (44.8%)

PR Types

Minor 230 (22.9%)

Patch 621 (61.8%)