AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VMwareCVE-2026-59287

VMware Spring for GraphQL: denial of service

VMware

CVE-2026-59287 · Published Aug 27, 2026 · updated Sep 2, 2026

Medium5.9
No fix yet
VMware advisory

Spring for GraphQL is vulnerable to Denial of Service attacks when using the WebSocket client with keepAlive enabled.

Spring for GraphQL 2.0.0 - 2.0.4

Spring for GraphQL 1.4.0 - 1.4.6

Spring for GraphQL 1.3.0 - 1.3.9

Affected versions

PackageAffectedFixed in
Spring for GraphQL
Product
>= 2.0.0, <= 2.0.4No fix yet
>= 1.4.0, <= 1.4.6No fix yet
>= 1.3.0, <= 1.3.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
NVD
Weakness
CWE-770

More VMware advisories

All VMware
Medium 6.5Aug 27VMware Spring AMQP: resource leakCVE-2026-59320no fix yetMedium 4.2Aug 27VMware Spring Integration: race conditionCVE-2026-59321no fix yetMedium 6.3Aug 27VMware Spring Integration: improper input validationCVE-2026-59322no fix yetHigh 8.2Aug 27VMware Spring Integration: race conditionCVE-2026-59324no fix yetHigh 8.0Aug 27VMware Spring Integration: unsafe deserializationCVE-2026-59307no fix yetMedium 6.8Aug 27VMware Spring Integration: link followingCVE-2026-59311no fix yet