{"id":"CVE-2026-40324","summary":"Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents","details":"Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14, Hot Chocolate's recursive descent parser `Utf8GraphQLParser` has no recursion depth limit. A crafted GraphQL document with deeply nested selection sets, object values, list values, or list types can trigger a `StackOverflowException` on payloads as small as 40 KB. Because `StackOverflowException` is uncatchable in .NET (since .NET 2.0), the entire worker process is terminated immediately. All in-flight HTTP requests, background `IHostedService` tasks, and open WebSocket subscriptions on that worker are dropped. The orchestrator (Kubernetes, IIS, etc.) must restart the process. This occurs before any validation rules run — `MaxExecutionDepth`, complexity analyzers, persisted query allow-lists, and custom `IDocumentValidatorRule` implementations cannot intercept the crash because `Utf8GraphQLParser.Parse` is invoked before validation. The `MaxAllowedFields=2048` limit does not help because the crashing payloads contain very few fields. The fix in versions 12.22.7, 13.9.16, 14.3.1, and 15.1.14 adds a `MaxAllowedRecursionDepth` option to `ParserOptions` with a safe default, and enforces it across all recursive parser methods (`ParseSelectionSet`, `ParseValueLiteral`, `ParseObject`, `ParseList`, `ParseTypeReference`, etc.). When the limit is exceeded, a catchable `SyntaxException` is thrown instead of overflowing the stack. There is no application-level workaround. `StackOverflowException` cannot be caught in .NET. The only mitigation is to upgrade to a patched version. Operators can reduce (but not eliminate) risk by limiting HTTP request body size at the reverse proxy or load balancer layer, though the smallest crashing payload (40 KB) is well below most default body size limits and is highly compressible (~few hundred bytes via gzip).","aliases":["GHSA-qr3m-xw4c-jqw3"],"modified":"2026-07-08T08:12:34.009421808Z","published":"2026-04-17T23:05:26.217Z","database_specific":{"cwe_ids":["CWE-674"],"cna_assigner":"GitHub_M","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40324.json"},"references":[{"type":"WEB","url":"https://github.com/ChilliCream/graphql-platform/releases/tag/12.22.7"},{"type":"WEB","url":"https://github.com/ChilliCream/graphql-platform/releases/tag/13.9.16"},{"type":"WEB","url":"https://github.com/ChilliCream/graphql-platform/releases/tag/14.3.1"},{"type":"WEB","url":"https://github.com/ChilliCream/graphql-platform/releases/tag/15.1.14"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/40xxx/CVE-2026-40324.json"},{"type":"ADVISORY","url":"https://github.com/ChilliCream/graphql-platform/security/advisories/GHSA-qr3m-xw4c-jqw3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40324"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/commit/08c0caa42ca33c121bbed49d2db892e5bf6fb541"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/commit/4cbaf67d366f800fc1e484bc5c06dfcf27b45023"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/commit/b185eb276c9ee227bd44616ff113be7f01a66c69"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/commit/b9271e6a500484c002fd528dcd34d1a9b445480f"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/pull/9528"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/pull/9530"},{"type":"FIX","url":"https://github.com/ChilliCream/graphql-platform/pull/9531"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/chillicream/graphql-platform","events":[{"introduced":"0"},{"introduced":"41da4291193058a077ea8366b1ec208f5c3bbe3c"},{"introduced":"d7f67edc9e8d3694dfcff2f6e3f3308300a7e15a"},{"introduced":"b8fcc1cf28eb0765eb3758730fd440635d4f7dec"},{"fixed":"b9271e6a500484c002fd528dcd34d1a9b445480f"},{"fixed":"84407785ade7bf4f0442f38f292838e2283b9406"},{"fixed":"8834fe4c347c9f76cab8ac0e3e6678c535f35637"},{"fixed":"4cbaf67d366f800fc1e484bc5c06dfcf27b45023"},{"fixed":"08c0caa42ca33c121bbed49d2db892e5bf6fb541"},{"fixed":"b185eb276c9ee227bd44616ff113be7f01a66c69"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"12.22.7"},{"introduced":"13.0.0"},{"fixed":"13.9.16"},{"introduced":"14.0.0"},{"fixed":"14.3.1"},{"introduced":"15.0.0"},{"fixed":"15.1.14"}]}}],"versions":["12.22.6","13.9.15","14.3.1-p.2","15.1.13","15.1.12","15.1.11","15.1.11-p.7","15.1.11-p.6","15.1.11-p.5","14.3.1-p.1","13.9.14-p.1","13.9.14","15.1.11-p.3","15.1.11-p.2","15.1.11-p.1","15.1.10-p.1","15.1.10","15.1.9","15.1.9-p.1","15.1.8","15.1.8-p.1","15.1.7-p.4","15.1.7-p.3","15.1.7","15.1.7-p.2","15.1.7-p.1","15.1.6","15.1.6-p.3","15.1.6-p.2","15.1.6-p.1","15.1.5-rc.2","15.1.5","15.1.5-rc.1","15.1.4-p.5","15.1.4","15.1.4-p.4","15.1.4-p.3","15.1.4-p.2","14.4.0-p.10","15.1.4-p.1","15.1.3","15.1.2-p.1","15.1.2","15.1.1-p.3","15.1.1","15.1.1-p.2","15.1.1-p.1","15.1.0-rc.4","15.1.0","15.1.0-rc.3","15.1.0-rc.2","15.1.0-rc.1","15.1.0-p.21","15.1.0-p.20","15.1.0-p.19","15.1.0-p.18","15.1.0-p.17","15.1.0-p.16","15.1.0-p.15","15.1.0-p.14","15.1.0-p.13","15.1.0-p.12","15.1.0-p.11","15.1.0-p.10","15.1.0-p.9","15.1.0-p.8","15.1.0-p.7","15.1.0-p.6","15.1.0-p.5","15.1.0-p.4","15.1.0-p.3","15.1.0-p.2","15.1.0-p.1","15.0.3","15.0.2","15.0.1","15.0.0","14.4.0-p.8","14.4.0-p.7","14.4.0-p.6","14.4.0-p.5","14.4.0-p.4","14.4.0-p.3","14.4.0-p.2","14.4.0-p.1","14.3.0","14.3.0-p.2","14.3.0-p.1","14.2.0-p.10","14.2.0","14.2.0-p.9","14.2.0-p.8","14.2.0-p.7","14.2.0-p.6","14.2.0-p.5","14.2.0-p.4","14.2.0-p.3","14.2.0-p.2","14.2.0-p.1","14.1.0","14.1.0-p.2","14.1.0-p.1","14.0.0-rc.4","14.0.0","12.22.5","13.9.13","12.22.4","13.9.12","13.9.11","13.9.10","13.9.9","13.9.8","13.9.7","13.9.6","13.9.5","13.9.4","13.9.3","13.9.2","13.9.1","12.22.3","12.22.2","13.9.1-p.1","13.9.0-rc.0","13.9.0","13.8.1","13.8.0-preview.8","13.8.0","13.8.0-preview.7","13.8.0-preview.6","13.8.0-preview.5","13.8.0-preview.4","13.8.0-preview.3","13.8.0-preview.2","12.22.1","12.22.0","13.8.0-preview.1","13.7.1-preview.3","13.7.1-preview.2","13.7.1-preview.1","13.7.0","12.22.0-preview.3","12.22.0-preview.2","13.6.2-preview.2","12.21.0","12.20.0","12.19.2","12.19.1","13.6.2-preview.1","13.6.1","13.6.0-rc.1","13.6.0","13.6.0-rc.0","13.6.0-preview.33","13.6.0-preview.32","13.6.0-preview.31","13.6.0-preview.30","13.6.0-preview.29","13.6.0-preview.28","13.6.0-preview.27","13.6.0-preview.26","13.6.0-preview.25","13.6.0-preview.24","13.6.0-preview.23","13.6.0-preview.22","13.6.0-preview.21","13.6.0-preview.20","13.6.0-preview.19","13.6.0-preview.18","13.6.0-preview.17","13.6.0-preview.16","13.6.0-preview.15","13.6.0-preview.14","13.6.0-preview.13","13.6.0-preview.12","13.6.0-preview.11","13.6.0-preview.10","13.6.0-preview.9","13.6.0-preview.8","13.6.0-preview.7","13.6.0-preview.6","13.6.0-preview.5","13.6.0-preview.4","13.6.0-preview.3","13.6.0-preview.2","13.6.0-preview.1","13.5.1","13.5.0","13.5.0-preview.24","13.5.0-preview.23","13.5.0-preview.22","13.5.0-preview.21","13.5.0-preview.20","13.5.0-preview.19","13.5.0-preview.18","13.5.0-preview.17","13.5.0-preview.8","13.5.0-preview.15","13.5.0-preview.7","13.5.0-preview.6","13.5.0-preview.5","13.5.0-preview.4","13.5.0-preview.3","13.5.0-preview.2","13.5.0-preview.1","13.4.0","13.4.0-preview.25","13.4.0-preview.24","13.4.0-preview.23","13.4.0-preview.22","13.4.0-preview.21","13.4.0-preview.20","13.4.0-preview.19","13.4.0-preview.18","13.4.0-preview.17","13.4.0-preview.16","13.4.0-preview.15","13.4.0-preview.12","13.4.0-preview.11","13.4.0-preview.10","13.4.0-preview.9","13.4.0-preview.8","13.4.0-preview.7","13.4.0-preview.6","13.4.0-preview.5","13.4.0-preview.4","13.3.3","13.3.2","13.3.0-rc.2","13.3.0","13.4.0-preview.3","13.4.0-preview.2","13.4.0-preview.1","13.3.1","13.3.0-rc.1","13.3.0-preview.12","13.3.0-preview.11","13.3.0-preview.10","13.3.0-preview.9","12.19.0","13.3.0-preview.8","13.3.0-preview.7","13.3.0-preview.6","13.3.0-preview.5","13.3.0-preview.4","13.3.0-preview.3","13.3.0-preview.2","13.3.0-preview.1","12.18.0","12.17.0","12.16.2","12.16.1","13.2.1","13.2.1-preview.3","13.2.1-preview.2","13.2.1-preview.1","13.2.0","13.2.0-rc.0","13.2.0-preview.3","13.2.0-preview.2","13.1.1-preview.1","13.1.0-rc.5","13.1.0","13.1.0-rc.4","13.1.0-rc.3","13.1.0-rc.2","14.0.0-preview.11.3","14.0.0-preview.11.2","14.0.0-preview.11.1","14.0.0-preview.10.11","14.0.0-preview.10.10","14.0.0-preview.10.9","14.0.0-preview.10.8","14.0.0-preview.10.7","14.0.0-preview.10.6","14.0.0-preview.10.5","14.0.0-preview.10.4","14.0.0-preview.10.3","14.0.0-preview.10.2","14.0.0-preview.10.1","14.0.0-preview.10.0","14.0.0-preview.9.1","14.0.0-preview.9","14.0.0-preview.10","14.0.0-preview.8","14.0.0-preview.7","14.0.0-preview.6","14.0.0-preview.5","14.0.0-preview.4","14.0.0-preview.3","14.0.0-preview.2","14.0.0-preview.1","13.0.0-rc.8","13.0.0","13.0.2","13.0.1","12.16.0","12.15.4","12.15.3","12.15.2","12.15.1","12.15.0","12.14.0","12.14.0-preview.2","12.14.0-preview.1","12.13.2","12.13.1","12.13.0-rc.1","12.13.0","12.13.0-preview.5","12.13.0-preview.4","12.13.0-preview.3","12.13.0-preview.2","12.13.0-preview.1","12.12.1","12.12.0","12.12.0-preview.5","12.12.0-preview.3","12.12.0-preview.2","12.12.0-preview.1","12.11.1","12.11.0-preview.5","12.11.0","12.11.0-preview.4","12.11.0-preview.3","12.11.0-preview.2","12.11.0-preview.1","12.10.0-preview.5","12.10.0","12.10.0-preview.4","12.10.0.preview.2","12.10.0-preview.3","12.10.0-preview.1","12.9.0-preview.3","12.9.0","12.9.0-preview.2","12.9.0-preview.1","12.8.2","12.8.1","12.8.0-rc.4","12.8.0","12.8.0-rc.3","12.8.0-rc.2","12.8.0-rc.1","12.8.0-preview.4","12.8.0-preview.3","12.8.0-preview.2","12.8.0-preview.1","12.7.0","12.6.2","12.6.1-rc.1","12.6.1","12.6.0-rc.3","12.6.0","12.6.0-rc.2","12.6.0-rc.1","12.6.0-preview.7","12.6.0-preview.6","12.6.0-preview.5","12.5.0","12.5.0-rc.2","12.5.0-rc.1","12.5.0-preview.23","12.5.0-preview.22","12.5.0-preview.21","12.5.0-preview.19","12.5.0-preview.18","12.5.0-preview.16","12.5.0-preview.15","12.5.0-preview.7","12.5.0-preview.6","12.5.0-preview.3","12.5.0-preview.2","12.4.1","12.4.0","12.4.0-rc.4","12.4.0-rc.3","12.4.0-rc.2","12.4.0-rc.1","12.4.0-preview.14","12.4.0-preview.13","12.4.0-preview.12","12.4.0-preview.11","12.4.0-preview.10","12.4.0-preview.9","12.4.0-preview.8","12.4.0-preview.7","12.3.2-preview.1","12.3.2","12.3.1","12.3.0-preview.2","12.3.0","12.3.0-preview.1","12.2.2","12.2.1","12.2.0","12.2.0-rc.3","12.2.0-rc.2","12.2.0-preview.21","12.1.0","12.1.0-preview.11","12.1.0-preview.10","12.1.0-preview.9","12.1.0-preview.8","12.1.0-preview.7","12.1.0-preview.5","12.1.0-preview.4","12.1.0-preview.3","12.1.0-preview.2","12.1.0-preview.1","12.0.1","12.0.0-rc.16","12.0.0","12.0.0-rc.15","12.0.0-rc.14","12.0.0-rc.13","12.0.0-rc.12","12.0.0-rc.11","12.0.0-rc.10","12.0.0-rc.9","12.0.0-rc.8","12.0.0-rc.7","12.0.0-rc.6","12.0.0-rc.5","12.0.0-rc.4","12.0.0-rc.3","12.0.0-rc.1","12.0.0-rc.0","12.0.0-preview.34","12.0.0-preview.33","12.0.0-preview.32","12.0.0-preview.31","12.0.0-preview.30","12.0.0-preview.29","12.0.0-preview.28","12.0.0-preview.27","12.0.0-preview.26","12.0.0-preview.25","12.0.0-preview.24","12.0.0-preview.23","12.0.0-preview.22","12.0.0-preview.21","12.0.0-preview.20","12.0.0-preview.19","12.0.0-preview.18","12.0.0-preview.17","12.0.0-preview.16","12.0.0-preview.15","12.0.0-preview.13","12.0.0-preview.12","12.0.0-preview.11","12.0.0-preview.10","12.0.0-preview.9","12.0.0-preview.8","12.0.0-preview.6","12.0.0-preview.5","12.0.0-preview.4","12.0.0-preview.3","12.0.0-preview.2","12.0.0-preview.1","12.0.0-preview.0","11.1.0-rc.7","11.1.0","11.1.0-preview.92","11.1.0-preview.91","11.1.0-rc.6","11.1.0-rc.5","11.1.0-rc.4","11.1.0-rc.3","11.1.0-rc.2","11.1.0-rc.1","11.1.0-rc.0","11.1.0-preview.90","11.1.0-preview.89","11.1.0-preview.88","11.1.0-preview.87","11.1.0-preview.86","11.1.0-preview.85","11.1.0-preview.84","11.1.0-preview.83","11.1.0-preview.82","11.1.0-preview.81","11.1.0-preview.80","11.1.0-preview.77","11.1.0-preview.76","11.1.0-preview.75","11.1.0-preview.74","11.1.0-preview.73","11.1.0-preview.72","11.1.0-preview.71","11.1.0-preview.70","11.1.0-preview.69","11.1.0-preview.68","11.1.0-preview.67","11.1.0-preview.66","11.1.0-preview.65","11.1.0-preview.64","11.1.0-preview.63","11.1.0-preview.62","11.1.0-preview.51","11.1.0-preview.31","11.1.0-preview.30","11.1.0-preview.29","11.1.0-preview.27","11.1.0-preview.26","11.1.0-preview.25","11.1.0-preview.8","11.0.8-rc.6","11.0.8-rc.5","11.1.0-preview.7","11.0.8-rc.4","11.0.8-rc.3","11.0.8-rc.2","11.0.8-rc.1","11.0.7","11.0.7-rc.1","11.0.7-rc.0","11.0.6","11.0.5","11.0.4","11.0.3","11.1.0-preview.6","11.1.0-preview.5","11.0.2","11.0.1","11.1.0-preview.4","11.1.0-preview.3","11.1.0-preview.2","11.1.0-preview.1","11.0.0-rc.10","11.0.0","11.0.0-rc.9","11.0.0-rc.8","11.0.0-rc.7","11.0.0-rc.6","11.0.0-rc.5","11.0.0-rc.4","11.0.0-rc.3","11.0.0-rc.2","11.0.0-rc.1","11.0.0-rc.0","11.0.0-preview.182","11.0.0-preview.181","11.0.0-preview.180","11.0.0-preview.178","11.0.0-preview.177","11.0.0-preview.172","11.0.0-preview.170","11.0.0-preview.169","11.0.0-preview.168","11.0.0-preview.167","11.0.0-preview.166","11.0.0-preview.165","11.0.0-preview.164","11.0.0-preview.163","11.0.0-preview.162","11.0.0-preview.161","11.0.0-preview.160","11.0.0-preview.159","11.0.0-preview.158","11.0.0-preview.157","11.0.0-preview.156","11.0.0-preview.155","11.0.0-preview.154","11.0.0-preview.153","11.0.0-preview.152","11.0.0-preview.151","11.0.0-preview.150","11.0.0-preview.149","11.0.0-preview.148","11.0.0-preview.147","11.0.0-preview.146","11.0.0-preview.145","11.0.0-preview.144","11.0.0-preview.143","11.0.0-preview.142","11.0.0-preview.141","11.0.0-preview.140","11.0.0-dev.17","11.0.0-dev.16","11.0.0-dev.15","11.0.0-dev.14","11.0.0-dev.13","11.0.0-dev.12","11.0.0-dev.11","11.0.0-dev.10","11.0.0-dev.9","11.0.0-dev.8","11.0.0-dev.7","11.0.0-dev.6","11.0.0-dev.5","11.0.0-dev.4","11.0.0-dev.3","11.0.0-dev.2","11.0.0-preview.138","11.0.0-preview.137","11.0.0-preview.136","11.0.0-preview.135","11.0.0-preview.134","11.0.0-preview.133","11.0.0-preview.132","11.0.0-preview.131","11.0.0-preview.130","11.0.0-preview.129","11.0.0-preview.128","11.0.0-preview.127","11.0.0-preview.126","11.0.0-preview.125","11.0.0-preview.124","11.0.0-preview.123","11.0.0-preview.122","11.0.0-preview.121","11.0.0-preview.120","11.0.0-preview.119","11.0.0-preview.118","11.0.0-preview.117","11.0.0-preview.116","11.0.0-preview.115","11.0.0-preview.114","11.0.0-preview.113","11.0.0-preview.109","11.0.0-preview.108","11.0.0-preview.107","11.0.0-preview.106","11.0.0-preview.105","11.0.0-preview.104","11.0.0-preview.103","11.0.0-preview.102","11.0.0-preview.101","11.0.0-preview.100","11.0.0-preview.99","11.0.0-preview.98","11.0.0-preview.97","11.0.0-preview.96","11.0.0-preview.95","11.0.0-preview.94","11.0.0-preview.93","11.0.0-preview.92","11.0.0-preview.91","11.0.0-preview.90","11.0.0-preview.89","11.0.0-preview.88","11.0.0-preview.87","11.0.0-preview.86","11.0.0-preview.85","11.0.0-preview.84","11.0.0-preview.83","11.0.0-preview.82","11.0.0-preview.81","11.0.0-preview.80","11.0.0-preview.79","11.0.0-preview.78","11.0.0-preview.77","11.0.0-preview.76","11.0.0-preview.75","11.0.0-preview.74","11.0.0-preview.73","11.0.0-preview.72","11.0.0-preview.70","10.3.0-preview.13","10.3.0-preview.12","11.0.0-preview.69","11.0.0-preview.68","11.0.0-preview.67","11.0.0-preview.66","11.0.0-preview.65","11.0.0-preview.64","11.0.0-preview.63","11.0.0-preview.62","11.0.0-preview.61","11.0.0-preview.60","11.0.0-preview.59","11.0.0-preview.58","11.0.0-preview.57","11.0.0-preview.56","11.0.0-preview.55","11.0.0-preview.54","11.0.0-preview.53","11.0.0-preview.52","11.0.0-preview.51","11.0.0-preview.50","11.0.0-preview.49","11.0.0-preview.47","10.2.0-preview.11","11.0.0-preview.46","11.0.0-preview.45","11.0.0-preview.44","10.2.0-preview.7","11.0.0-preview.43","11.0.0-preview.42","11.0.0-preview.41","11.0.0-preview.37","11.0.0-preview.35","11.0.0-preview.34","11.0.0-preview.33","11.0.0-preview.32","11.0.0-preview.31","11.0.0-preview.30","11.0.0-preview.29","11.0.0-preview.28","11.0.0-preview.27","11.0.0-preview.26","11.0.0-preview.25","11.0.0-preview.19","11.0.0-preview.18","11.0.0-preview.17","11.0.0-preview.16","11.0.0-preview.15","11.0.0-preview.14","11.0.0-preview.13","11.0.0-preview.7","11.0.0-preview.11","10.1.0-preview.5","11.0.0-preview.6","11.0.0-preview.5","11.0.0-preview.4","10.1.0-preview.3","11.0.0-preview.3","10.1.0-preview.1","11.0.0-preview.2","11.0.0-preview.1","10.0.1","10.0.0-rc.3","10.0.0","10.0.0-rc.2","10.0.0-rc.1","10.0.0-rc.0","10.0.0-preview.51","10.0.0-preview.50","10.0.0-preview.49","10.0.0-preview.48","9.1.0-preview.46","10.0.0-preview.47","9.1.0-preview.45","9.1.0-preview.44","9.1.0-preview.43","9.1.0-preview.42","9.1.0-preview.41","9.1.0-preview.40","9.1.0-preview.39","9.1.0-preview.38","9.1.0-preview.37","9.1.0-preview.36","9.1.0-preview.35","9.1.0-preview.34","9.1.0-preview.33","9.1.0-preview.32","9.1.0-preview.31","9.1.0-preview.30","9.1.0-preview.28","9.1.0-preview.27","9.1.0-preview.26","9.1.0-preview.24","9.1.0-preview.23","9.1.0-preview.22","9.1.0-preview.21","9.1.0-preview.20","9.1.0-preview.19","9.1.0-preview.18","9.1.0-preview.17","9.1.0-preview.16","9.1.0-preview.15","9.1.0-preview.14","9.1.0-preview.12","9.1.0-preview.11","9.1.0-preview.10","9.1.0-preview.9","9.1.0-preview.8","9.1.0-preview.7","9.1.0-preview.6","9.1.0-preview.5","9.1.0-preview.4","9.1.0-preview.3","9.0.1","9.1.0-preview.2","9.1.0-preview.1","9.0.0","9.0.0-rc.5","9.0.0-rc.4","9.0.0-rc.3","9.0.0-rc.2","9.0.0-rc.1","9.0.0-preview.42","9.0.0-preview.41","9.0.0-preview.40","9.0.0-preview.39","9.0.0-preview.38","9.0.0-preview.37","9.0.0-preview.36","9.0.0-preview.35","9.0.0-preview.34","9.0.0-preview.33","9.0.0-preview.32","9.0.0-preview.31","9.0.0-preview.30","9.0.0-preview.29","9.0.0-preview.28","9.0.0-preview.27","9.0.0-preview.26","9.0.0-preview.25","9.0.0-preview.24","9.0.0-preview.23","9.0.0-preview.22","9.0.0-preview.21","9.0.0-preview.20","9.0.0-preview.19","9.0.0-preview.18","9.0.0-preview.17","9.0.0-preview.16","0.8.2-preview.1","9.0.0-preview.9","9.0.0-preview.8","0.8.1","0.8.1-rc.6","0.8.1-rc.5","0.8.1-rc.4","9.0.0-preview.7","0.8.1-rc.3","0.8.1-rc.2","9.0.0-preview.6","0.8.1-rc.1","9.0.0-preview.5","9.0.0-preview.4","9.0.0-preview.3","9.0.0-preview.2","9.0.0-preview.1","0.8.0-rc.2","0.8.0","0.8.0-rc.1","0.8.0-preview.13","0.8.0-preview.2","0.8.0-preview.1","0.7.0","0.7.0-rc.3","0.7.0-rc.2","0.7.0-rc.1","0.7.0-preview.44","0.7.0-preview.43","0.7.0-preview.42","0.7.0-preview.41","0.7.0-preview.40","0.7.0-preview.39","0.7.0-preview.38","0.7.0-preview.37","0.7.0-preview.36","0.7.0-preview.35","0.7.0-preview.34","0.7.0-preview.33","0.7.0-preview.32","0.7.0-preview.31","0.7.0-preview.30","0.7.0-preview.29","0.7.0-preview.28","0.7.0-preview.26","0.7.0-preview.20","0.7.0-preview.19","0.7.0-preview.18","0.7.0-preview.17","0.7.0-preview.16","0.7.0-preview.15","0.6.11","0.6.10","0.6.9","0.6.8","0.6.8-preview.1","0.6.7","0.6.6","0.6.5","0.6.4","0.6.3","0.6.2","0.6.1","0.6.0","0.6.0-rc-1","0.6.0-preview-9","0.6.0-preview-8","0.6.0-preview-7","0.6.0-preview-6","0.6.0-preview-5","0.6.0-preview-4","0.6.0-preview-3","0.6.0-preview-2","0.6.0-preview-1","0.5.3-preview-1","0.5.2","0.5.1","0.5.0","0.5.0-preview-7","0.5.0-preview-6","0.5.0-preview-5","0.5.0-preview-4","0.5.0-preview-3","0.5.0-preview-2","0.5.0-preview-1","0.4.6","0.4.5","0.4.5-preview-3","0.4.5-preview-2","0.4.5-preview-1","0.4.4","0.4.3","0.4.2","0.4.1","0.4.0","0.4.0-preview-3","0.3.2","0.3.1","0.4.0-preview-2","0.3.0","0.3.0-preview-2","0.3.0-preview-1","0.2.2","0.2.1","0.2.0","0.1.4","0.1.3","0.1.2","0.1.1","0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-40324.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"}]}