Is HotChocolate.Language safe to use?

HotChocolate.Language has 1 known vulnerabilities on the latest version (16.1.0-p.1.9). DepScope rates its health at 46/100 (high risk).

What is the latest version of HotChocolate.Language?

The latest version of HotChocolate.Language is 16.1.0-p.1.9, released 1900-01-01.

Yes. HotChocolate.Language has 1 known vulnerabilities. See depscope.dev/pkg/nuget/HotChocolate.Language for details.

No, HotChocolate.Language is actively maintained. Latest release: 16.1.0-p.1.9 (1900-01-01).

DepScope has no curated alternatives for HotChocolate.Language at this time.

HotChocolate.Language is licensed under MIT.

nugetv16.1.0-p.1.9

Contains the Hot Chocolate GraphQL parser and lexer. Also included are syntax visitor and syntax rewriter base classes.

License MITpermissive1898 versions1 maintainers4 deps321,656 weekly dl

/ 100

Health

do not use

HotChocolate.Language has critical vulnerabilities — do not use

Update to >= 15.1.14 to fix known vulnerabilities

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

15/25

security

15/15

maturity

2/15

community

Vulnerabilities

1 critical

Advisories (1)

Severity	ID	Summary	Fixed in
critical	CVE-2026-40324	ChilliCream GraphQL Platform: Utf8GraphQLParser Stack Overflow via Deeply Nested GraphQL Documents	15.1.14

Dependencies (4)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/nuget/HotChocolate.Language

Last updated · 1900-01-01T00:00:00+00:00