What’s Vulnerable › Products

Spring for GraphQL vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Spring for GraphQL version is affected

Latest Spring for GraphQL vulnerabilities

• CVE-2026-59289 — Spring for GraphQL Denial of Service via pagination support (CVSS 7.5)
• CVE-2026-59288 — Spring for GraphQL Information Exposure in GraphiQL support (CVSS 7.4)
• CVE-2026-59287 — Spring for GraphQL WebSocket Client Denial of Service (CVSS 5.9)
• CVE-2026-59286 — Spring for GraphQL loads Untrusted Resources in GraphiQL support (CVSS 8.1)
• CVE-2026-59285 — Spring for GraphQL Unsafe Deserialization in pagination support (CVSS 8.1)
• CVE-2026-41856 — Spring GraphQL Annotation Detection Vulnerability (CVSS 7.5)
• CVE-2026-41700 — Cross-Site WebSocket Hijacking in Spring for GraphQL (CVSS 8.1)
• CVE-2026-41699 — Unsafe Deserialization in Spring GraphQL (CVSS 9.8)
• CVE-2023-34047 — Exposure of data and identity to wrong session in Spring for GraphQL (CVSS 4.3)