CVE-2026-59287
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/08/2026
Last modified:
27/08/2026
Description
Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled.<br />
Spring for GraphQL 2.0.0 - 2.0.4<br />
Spring for GraphQL 1.4.0 - 1.4.6<br />
Spring for GraphQL 1.3.0 - 1.3.9