Known vulnerabilities in Spring for GraphQL 1.2.6

Vendor: Broadcom
Version: 1.2.6
Software CPE: cpe:2.3:a:broadcom:spring_for_graphql:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Spring for GraphQL version 1.2.6 Spring for GraphQL 1.2.6 is affected by 3 vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146426 - Allocation of Resources Without Limits or Throttling
CVE-2026-59289
CWE-770 Medium
No
No
1.3.10, 1.4.7, 2.0.4.1, 2.0.5 31.08.2026 SB2026083164
#VU146425 - Exposure of sensitive information to an unauthorized actor
CVE-2026-59288
CWE-200 Medium
No
No
1.0.8, 1.3.10, 1.4.7, 2.0.4.1, 2.0.5 31.08.2026 SB2026083164
#VU146422 - Download of Code Without Integrity Check
CVE-2026-59286
CWE-494 Medium
No
No
1.0.8, 1.3.10, 1.4.7, 2.0.4.1, 2.0.5 31.08.2026 SB2026083164