Skip to content
OpenAdvisories

Package · Maven

org.springframework.graphql:spring-graphql

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2023-34047

    Exposure of data and identity to wrong session in Spring for GraphQL

    A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions …

    Spring Spring for GraphQL org.springframework.graphql:spring-graphql Maven