Threats tagged 'brew-schemathesis-cve-2026-119286'

A denial of service vulnerability in Schemathesis's GraphQL-core validation occurs due to a memory leak when validations are aborted after exceeding the max_errors limit. The shared ValidationAbortedError instance retains traceback frames and validation context, causing memory to grow with each aborted validation request. This can exhaust memory and crash the process. The issue affects versions >=4.32.1 and <4.32.5 and is fixed in 4.32.5.