SZB-d9f207e430
EUVD lists GraphQL denial-of-service in traggo server v0.8.3 (EUVD-2026-114178)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- traggo
- Product
- traggo server
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-114178, as shared on Mastodon, describes a denial-of-service issue in the GraphQL endpoint of traggo server v0.8.3. The entry has no CVSS score yet.
If you use traggo
Check whether you run traggo server v0.8.3.
Limit access to the GraphQL endpoint to trusted clients.
Watch the project for a patched release.
What the sources say 1
· Mastodon: “An issue in the GraphQL endpoint of traggo server v0.8.3 allows attackers to cause a Denial of Service (DoS) via a crafted POST request to the GraphQL endpoint” Source