CVE-2026-59285

Description

References

• spring.io/security/cve-2026-59285 · Vendor Advisory

spring for graphql의 다른 취약점

• CVE-2026-59289높음 7.5Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the …
• CVE-2026-59288높음 7.4The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malici…
• CVE-2026-59287보통 5.9Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0…
• CVE-2026-59286높음 8.1The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An att…
• CVE-2026-41856높음 7.5The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type…