Advisories · Technology
Spring for GraphQL.
Every CVE that names Spring for GraphQL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Spring for GraphQL Denial of Service via pagination support
- Spring for GraphQL
- Denial of service
- CVSS 7.5 High
Spring for GraphQL Information Exposure in GraphiQL support
- Spring for GraphQL
- Information disclosure
- CVSS 5.9 Medium
Spring for GraphQL WebSocket Client Denial of Service
- Spring for GraphQL
- Denial of service
- CVSS 8.1 High
Spring for GraphQL loads Untrusted Resources in GraphiQL support
- Spring for GraphQL
- CWE-494
- CVSS 8.1 High
Spring for GraphQL Unsafe Deserialization in pagination support
- Spring for GraphQL
- Insecure deserialization