CVE-2026-59285

Unknown

Published: 27/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Summary

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Affects versions 2.0.0 - 2.0.4.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code or cause unexpected application behavior, potentially leading to data confidentiality and integrity breaches.

Recommendation

Update Spring for GraphQL to the latest available version that includes the security fix.

Original NVD description (English source)

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries. Spring for GraphQL 2.0.0 - 2.0.4