VendorsVMwarespring_for_graphqlall versions
Vulnerabilities

VMware Spring for GraphQL (spring-graphql)

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2026-41699
Unsafe Deserialization in Spring GraphQL
Published 2026-06-11 · Analyzed
9.8EPSS 0.007
CVE-2026-59285
Spring for GraphQL Unsafe Deserialization in pagination support
Published 2026-08-27 · Modified
8.1EPSS 0.004
CVE-2026-59286
Spring for GraphQL loads Untrusted Resources in GraphiQL support
Published 2026-08-27 · Modified
8.1EPSS 0.003
CVE-2026-41700
Cross-Site WebSocket Hijacking in Spring for GraphQL
Published 2026-06-11 · Analyzed
8.1EPSS 0.002
CVE-2026-59289
Spring for GraphQL Denial of Service via pagination support
Published 2026-08-27 · Modified
7.5EPSS 0.005
CVE-2026-41856
Spring GraphQL Annotation Detection Vulnerability
Published 2026-06-11 · Analyzed
7.5EPSS 0.004
CVE-2026-59288
Spring for GraphQL Information Exposure in GraphiQL support
Published 2026-08-27 · Modified
7.5EPSS 0.004
CVE-2026-59287
Spring for GraphQL WebSocket Client Denial of Service
Published 2026-08-27 · Modified
5.9EPSS 0.004
CVE-2023-34047
Exposure of data and identity to wrong session in Spring for GraphQL
Published 2023-09-20 · Modified
4.3EPSS 0.004