What is GHSA-32wx-2g57-hccx?

GHSA-32wx-2g57-hccx is a security advisory published by GitHub Security Advisories with unknown severity. The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the...

Which CVE IDs does GHSA-32wx-2g57-hccx cover?

GHSA-32wx-2g57-hccx covers the following CVE IDs: CVE-2026-59288. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-32wx-2g57-hccxunknown

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-59288 →

📋 Description

The GraphiQL page bundled with Spring for GraphQL sends requests to the GraphQL endpoints of the application. An attacker can share a malicious URL so that the victim's browser might leak confidential information to the attacker's website. Spring for GraphQL 2.0.0 - 2.0.4 Spring for GraphQL 1.4.0 - 1.4.6 Spring for GraphQL 1.1.0 - 1.3.9 Spring for GraphQL 1.0.0 - 1.0.7

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-59288
https://spring.io/security/cve-2026-59288
https://github.com/advisories/GHSA-32wx-2g57-hccx