CVE-2026-40476: CWE-407: Inefficient Algorithmic Complexity in webonyx graphql-php

April 18, 2026

CVE-2026-40476 is a medium severity vulnerability in the webonyx graphql-php library versions prior to 15. 31. 5. The issue arises from an …