{"items":[{"id":"CVE-2026-59289","published":"2026-08-27T17:57:47.944Z","updated":"2026-09-02T16:29:16.153Z","title":"Spring for GraphQL Denial of Service via pagination support","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.0046,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59288","published":"2026-08-27T17:57:46.990Z","updated":"2026-09-01T15:36:35.910Z","title":"Spring for GraphQL Information Exposure in GraphiQL support","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00374,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59287","published":"2026-08-27T17:57:45.951Z","updated":"2026-09-02T16:33:55.633Z","title":"Spring for GraphQL WebSocket Client Denial of Service","severity":"MEDIUM","score":5.9,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00367,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59286","published":"2026-08-27T17:57:44.958Z","updated":"2026-09-02T17:35:48.563Z","title":"Spring for GraphQL loads Untrusted Resources in GraphiQL support","severity":"HIGH","score":8.1,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00327,"kevAdded":null,"exploit":false},{"id":"CVE-2026-59285","published":"2026-08-27T17:57:43.851Z","updated":"2026-09-02T18:14:59.496Z","title":"Spring for GraphQL Unsafe Deserialization in pagination support","severity":"HIGH","score":8.1,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00436,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41856","published":"2026-06-11T05:05:00.491Z","updated":"2026-06-30T21:52:23.654Z","title":"Spring GraphQL Annotation Detection Vulnerability","severity":"HIGH","score":7.5,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00352,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41700","published":"2026-06-11T05:04:47.722Z","updated":"2026-06-30T21:51:38.214Z","title":"Cross-Site WebSocket Hijacking in Spring for GraphQL","severity":"HIGH","score":8.1,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00189,"kevAdded":null,"exploit":false},{"id":"CVE-2026-41699","published":"2026-06-11T05:04:43.290Z","updated":"2026-06-30T21:51:09.488Z","title":"Unsafe Deserialization in Spring GraphQL","severity":"HIGH","score":8.1,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00431,"kevAdded":null,"exploit":false},{"id":"CVE-2023-34047","published":"2023-09-20T09:09:12.648Z","updated":"2024-09-24T19:04:05.232Z","title":"Exposure of data and identity to wrong session in Spring for GraphQL","severity":"LOW","score":3.1,"vendor":"Spring","product":"Spring for GraphQL","kev":false,"epss":0.00418,"kevAdded":null,"exploit":false}]}