Spring for GraphQL
Spring- Software type
- —
- Catalog vulnerabilities
- 9
Severity across 9 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 9 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, Spring for GraphQL has 5 security vulnerabilities published in the last 90 days. Of these, 4 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Spring for GraphQL and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-59289Spring for GraphQL Denial of Service via pagination support | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-59288Spring for GraphQL Information Exposure in GraphiQL support | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-59287Spring for GraphQL WebSocket Client Denial of Service | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityMedium |
CVE-2026-59286Spring for GraphQL loads Untrusted Resources in GraphiQL support | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-59285Spring for GraphQL Unsafe Deserialization in pagination support | Exploitation statusNot known exploited | FixYes | Published08/27/2026 | SeverityHigh |
CVE-2026-41856Spring GraphQL Annotation Detection Vulnerability | Exploitation statusNot known exploited | FixYes | Published06/11/2026 | SeverityHigh |
CVE-2026-41700Cross-Site WebSocket Hijacking in Spring for GraphQL | Exploitation statusNot known exploited | FixYes | Published06/11/2026 | SeverityHigh |
CVE-2026-41699Unsafe Deserialization in Spring GraphQL | Exploitation statusNot known exploited | FixYes | Published06/11/2026 | SeverityHigh |
CVE-2023-34047Exposure of data and identity to wrong session in Spring for GraphQL | Exploitation statusNot known exploited | FixYes | Published09/20/2023 | SeverityLow |