High · 8.1 CVE-2026-59285 EUVD-2026-67174GHSA-p95r-c5q2-2rhf

Spring for GraphQL Unsafe Deserialization in pagination support

Published Aug 27, 2026 · Updated Sep 2, 2026 · Assigned by vmware

Description

Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries.
Spring for GraphQL 2.0.0 - 2.0.4

Vendor	Product	Affected	Fixed
Spring	Spring for GraphQL	2.0.0 – ≤ 2.0.4	—