CVE-2026-59285

Spring for GraphQL (versions 2.0.0–2.0.4 ) is vulnerable to Unsafe Deserialization (CWE-502) when processing paginated GraphQL queries. The root cause lies in the deserialization of untrusted data via Jackson 2.x when handling a Connection (pagination) field . An attacker can execute arbitrary co...