CVE-2026-59287 — Spring for GraphQL WebSocket Client Denial of Service

CVE-2026-59287

Spring for GraphQL WebSocket Client Denial of Service PUBLISHED

Description (CNA)

Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.3.0 - 1.3.9

Affected (CNA)

Vendor / product	Versions
Spring / Spring for GraphQL	affected 2.0.0 through 2.0.4; affected 1.4.0 through 1.4.6; affected 1.3.0 through 1.3.9

CWE

No CWE identifiers supplied.

References

https://spring.io/security/cve-2026-59287

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.