VYPR

Graphql Java Spring

by Graphql Java

Source repositories

CVEs (1)

  • CVE-2026-59286HigAug 27, 2026
    risk 0.53cvss 8.1epss 0.00

    The GraphiQL page bundled with Spring for GraphQL loads JavaScript libraries from a public CDN, without Subresource Integrity checks. An attacker can inject malicious code in those scripts and execute arbitrary code on the browser loading the GraphiQL page. Spring for GraphQL…