CLSA-2026-1791367893 TuxCare security update for org.springframework.graphql:spring-graphql (1 CVE)

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 1 CVE. Fixed in 1.3.5-tuxcare.6...

PT-2026-116402

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 1 CVE. Fixed in 1.3.5-tuxcare.6...

PT-2026-96614

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 1 CVE. Fixed in 1.3.5-tuxcare.4...

PT-2026-95533

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 5 CVEs. Fixed in 1.3.5-tuxcare.3...

PT-2026-90808

TuxCare rebuilt org.springframework.graphql:spring-graphql to address 6 CVEs. Fixed in 1.3.5-tuxcare.1...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=7.0.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +55 more potentially affected by CVE-2026-59287 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.4)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=7.0.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +55 more potentially affected by CVE-2026-59286 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.4)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=7.0.0), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +55 more potentially affected by CVE-2026-59285 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.4)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

com.apollographql.federation:federation-spring-subscription-callback (>=4.2.0, <=7.0.0), com.contentmunch:blog-api (>=2.0.0.release, <=2.0.1.release) +156 more potentially affected by CVE-2026-59288 via org.springframework.graphql:spring-graphql (>=1.0.0, <=2.0.4)

org.springframework.graphql:spring-graphql MAVEN version =1.0.0, =4.2.0, =2.0.0.release, =1.0.1, =4.0, =2.0rc1, =2.0rc1, =4.0, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1, =2.0rc1,...

com.apollographql.federation:federation-spring-subscription-callback (>=5.1.0, <=5.5.0), com.introproventures:graphql-jpa-query-test-boot-starter (>=1.2.8, <=1.2.15) +48 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=1.3.0, <=1.3.7)

org.springframework.graphql:spring-graphql MAVEN version =1.3.0, =5.1.0, =1.2.8, =1.2.8, =1.2.8, =1.2.8, =10.0.0, =10.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.1.1, =1.0.0, =1.17.2, =1.17.2, =1.20.2 and more Source cves: CVE-2026-41700https://vulners.com/cve/CVE-2026-4170...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=6.2.1), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +53 more potentially affected by CVE-2026-41856 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

com.github.vzakharchenko:bridge-forge-connect (>=1.0.1, <=1.0.2), com.graphql-java-generator:graphql-java-client-dependencies (>=3.0, <=3.1) +73 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=1.4.0, <=1.4.5)

org.springframework.graphql:spring-graphql MAVEN version =1.4.0, =1.0.1, =3.0, =3.0, =3.0, =3.0, =1.3.0, =1.3.0, =1.3.0, =1.3.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.2.0, =10.6.0 and more Source cves: CVE-2026-41700 Source advisory: MEN...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=6.2.1), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +53 more potentially affected by CVE-2026-41700 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...

com.apollographql.federation:federation-spring-subscription-callback (>=6.0.0, <=6.2.1), com.graphql-java-generator.graphql-gradle-plugin3:com.graphql-java-generator.graphql-gradle-plugin3.gradle.plugin (>=4.0, <=4.0.2) +53 more potentially affected by CVE-2026-41699 via org.springframework.graphql:spring-graphql (>=2.0.0, <=2.0.3)

org.springframework.graphql:spring-graphql MAVEN version =2.0.0, =6.0.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0, =4.0.2 - com.introproventures:graphql-jpa-query-test-boot-starter 1.4.0 - com.introproventures:graphql-jpa-query-test-multiple-datasources 1.4.0 -...