CVE-2026-59289

Spring for GraphQL 's Spring Data pagination support resolves arguments of a scrollable query and forwards client-supplied values directly to the underlying repository without adequate validation. An attacker can forge a malicious query targeting a Connection field , exhausting application memory...