Spring Spring for GraphQL vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20268

Newest CVEs

• CVE-2026-59289

  Spring for GraphQL Denial of Service via pagination support

  Spring · Spring for GraphQL

  High7.5
• CVE-2026-59288

  Spring for GraphQL Information Exposure in GraphiQL support

  Spring · Spring for GraphQL

  High7.5
• CVE-2026-59287

  Spring for GraphQL WebSocket Client Denial of Service

  Spring · Spring for GraphQL

  Medium5.9
• CVE-2026-59286

  Spring for GraphQL loads Untrusted Resources in GraphiQL support

  Spring · Spring for GraphQL

  High8.1
• CVE-2026-59285

  Spring for GraphQL Unsafe Deserialization in pagination support

  Spring · Spring for GraphQL

  High8.1
• CVE-2026-41856

  Spring GraphQL Annotation Detection Vulnerability

  Spring · Spring for GraphQL

  High7.5
• CVE-2026-41700

  Cross-Site WebSocket Hijacking in Spring for GraphQL

  Spring · Spring for GraphQL

  High8.1
• CVE-2026-41699

  Unsafe Deserialization in Spring GraphQL

  Spring · Spring for GraphQL

  High8.1
• CVE-2023-34047

  Exposure of data and identity to wrong session in Spring for GraphQL

  Spring · Spring for GraphQL

  Low3.1