Juniper Networks · Juniper · CVE-2022-31173
**Name of the Vulnerable Software and Affected Versions**
Juniper versions prior to 0.15.10
**Description**
The issue is related to uncontrolled recursion in the Juniper GraphQL server library for Rust, which can result in a program crash. This can be caused by deeply nested fragments in a GraphQL request, potentially leading to a stack overflow in the server. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
**Recommendations**
For versions prior to 0.15.10, upgrade to version 0.15.10 to resolve the issue.
For users unable to upgrade, limit the recursion depth manually as a temporary workaround.