All 9 CVE vulnerabilities found in Spring for GraphQL, with AI-generated Chinese analysis, references, and POCs.
Vendor: Spring
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-59289 | Spring for GraphQL Denial of Service via pagination support | - | - | 2026-08-27 |
| CVE-2026-59288 | Spring for GraphQL Information Exposure in GraphiQL support | - | - | 2026-08-27 |
| CVE-2026-59287 | Spring for GraphQL WebSocket Client Denial of Service | - | - | 2026-08-27 |
| CVE-2026-59286 | Spring for GraphQL loads Untrusted Resources in GraphiQL support | - | - | 2026-08-27 |
| CVE-2026-59285 | Spring for GraphQL Unsafe Deserialization in pagination support | - | - | 2026-08-27 |
| CVE-2026-41856 | Spring GraphQL Annotation Detection Vulnerability CWE-284 | 7.5 | High | 2026-06-11 |
| CVE-2026-41700 | Cross-Site WebSocket Hijacking in Spring for GraphQL CWE-346 | 8.1 | High | 2026-06-11 |
| CVE-2026-41699 | Unsafe Deserialization in Spring GraphQL CWE-502 | 8.1 | High | 2026-06-11 |
| CVE-2023-34047 | Exposure of data and identity to wrong session in Spring for GraphQL | 3.1 | Low | 2023-09-20 |
All 9 known CVE vulnerabilities affecting Spring for GraphQL with full Chinese analysis, references, and POCs where available.