18 matches found
K000162466: Spring GraphQL vulnerability CVE-2026-41856
Security Advisory Description The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met,...
com.apollographql.federation:federation-spring-subscription-callback (>=5.1.0, <=5.5.0), com.introproventures:graphql-jpa-query-test-boot-starter (>=1.2.8, <=1.2.15) +48 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.3.0, <=1.3.7)
org.springframework.graphql:spring-graphql MAVEN version =1.3.0, =5.1.0, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =10.0.0, =10.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.1.1, =1.0.0, =1.17.2, =1.17.2, =1.20.2 and more Source cves: CVE-2026-41856https://vulners.com/cve/CVE-2026-4185...
com.graphql-java-generator.graphql-gradle-plugin:com.graphql-java-generator.graphql-gradle-plugin.gradle.plugin (>=2.0rc1, <=2.0), com.graphql-java-generator:graphql-gradle-plugin (>=2.0rc1, <=2.0) +42 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.0.0, <=1.0.6)
org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0 - com.graphql-java-generator:graphql-maven-plugin-samples-allgraphqlcases-client 2.0rc1 -...
com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=6.2.1), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +53 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.3)
org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...
com.github.vzakharchenko:bridge-forge-connect (>=1.0.1, <=1.0.2), com.graphql-java-generator:graphql-java-client-dependencies (>=3.0, <=3.1) +72 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.4.0, <=1.4.5)
org.springframework.graphql:spring-graphql MAVEN version =1.4.0, =1.0.1, =3.0, =3.0, =3.0, =3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.6.0 and more Source cves: CVE-2026-41856 Source advisory: GHS...
com.apollographql.federation:federation-spring-subscription-callback (>=5.1.0, <=5.5.0), com.introproventures:graphql-jpa-query-test-boot-starter (>=1.2.8, <=1.2.15) +48 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=1.3.0, <=1.3.7)
org.springframework.graphql:spring-graphql MAVEN version =1.3.0, =5.1.0, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =10.0.0, =10.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.1.1, =1.0.0, =1.17.2, =1.17.2, =1.20.2 and more Source cves: CVE-2026-41856https://vulners.com/cve/CVE-2026-4185...
CVE-2026-41856
creationtimestamp| type| source ---|---|--- 2026-06-11 08:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr3dgend2x 2026-06-11 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116730653982449979 2026-06-11 09:00:29+00:00| seen|...
CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability
The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...
CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability
The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored...
CVE-2024-41856
creationtimestamp| type| source ---|---|--- 2024-08-14 18:13:34+00:00| seen| https://t.me/cvedetector/3157...
CVE-2024-41856
Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2024-41856
Illustrator versions 28.5, 27.9.4, 28.6, 27.9.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2021-41856
Rejected reason: This is unused...
CVE-2023-41856 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in ClickToTweet.Com Click To Tweet plugin = 2.0.14 versions...
CVE-2023-41856
CVE-2023-41856 is an unauthenticated, reflected XSS in the WordPress Click To Tweet plugin, affecting versions
WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)
Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-41856 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID a4c8c362a5de Credits thiennv Required...