CVE-2026-59285

Mô tả

Tham khảo

• spring.io/security/cve-2026-59285 · Vendor Advisory

Lỗ hổng khác của spring for graphql

• CVE-2026-59289CAO 7.5Spring for GraphQL's Spring Data pagination support resolves arguments of a scrollable query and forwards the client-supplied values to the …
• CVE-2026-59288CAO 7.4The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malici…
• CVE-2026-59287TRUNG BÌNH 5.9Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0…
• CVE-2026-59286CAO 8.1The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An att…
• CVE-2026-41856CAO 7.5The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type…