SF
Product
Spring for GraphQL
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 1Low 0
Watch
Add Spring for GraphQL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-41699 | 9.8 | Jun 11 | Unsafe Deserialization in Spring GraphQL Affected: 2.0.0 before 2.0.3.1; 1.4.0 before 1.4.5.1; 1.3.0 before 1.3.9 |
| CVE-2026-59286 | 8.1 | Aug 27 | Spring for GraphQL loads Untrusted Resources in GraphiQL support Affected: 2.0.0 through 2.0.4; 1.4.0 through 1.4.6; 1.1.0 through 1.3.9; 1.0.0 through 1.0.7 |
| CVE-2026-59285 | 8.1 | Aug 27 | Spring for GraphQL Unsafe Deserialization in pagination support Affected: 2.0.0 through 2.0.4 |
| CVE-2026-41700 | 8.1 | Jun 11 | Cross-Site WebSocket Hijacking in Spring for GraphQL Affected: 2.0.0 before 2.0.3.1; 1.4.0 before 1.4.5.1; 1.3.0 before 1.3.9; 1.0.0 before 1.0.7 |
| CVE-2026-59289 | 7.5 | Aug 27 | Spring for GraphQL Denial of Service via pagination support Affected: 2.0.0 through 2.0.4; 1.4.0 through 1.4.6; 1.2.0 through 1.3.9 |
| CVE-2026-41856 | 7.5 | Jun 11 | Spring GraphQL Annotation Detection Vulnerability Affected: 2.0.0 before 2.0.3.1; 1.4.0 before 1.4.5.1; 1.3.0 before 1.3.9; 1.0.0 before 1.0.7 |
| CVE-2026-59288 | 7.4 | Aug 27 | Spring for GraphQL Information Exposure in GraphiQL support Affected: 2.0.0 through 2.0.4; 1.4.0 through 1.4.6; 1.1.0 through 1.3.9; 1.0.0 through 1.0.7 |
| CVE-2026-59287 | 5.9 | Aug 27 | Spring for GraphQL WebSocket Client Denial of Service Affected: 2.0.0 through 2.0.4; 1.4.0 through 1.4.6; 1.3.0 through 1.3.9 |
Showing 8