CVE-2026-59285

概要

参考情報

• spring.io/security/cve-2026-59285 · Vendor Advisory

spring for graphql のその他の脆弱性

• CVE-2026-59289高 7.5Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the …
• CVE-2026-59288高 7.4The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malici…
• CVE-2026-59287中 5.9Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0…
• CVE-2026-59286高 8.1The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An att…
• CVE-2026-41856高 7.5The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type…