CVE Catalog
CVE-2026-59287
UnknownSummary
Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Affects Spring for GraphQL versions 2.0.0-2.0.4, 1.4.0-1.4.6, and 1.3.0-1.3.9.
Risk Assessment
An attacker could exploit this to overload the server, potentially leading to service unavailability.
Recommendation
Update Spring for GraphQL to a patched version and consider disabling keepAlive if not required.
Original NVD description (English source)
Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.3.0 - 1.3.9