https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:28:32.414437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0763 certfr-2023-avi-0763 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> les produits </span>Spring. Elles permettent… 2026-10-03T12:28:32.493703+00:00 certfr-2023-avi-0763 https://cve.radiocsirt.org/vuln/euvd-2026-187662 EUVD-2026-187662 2026-10-03T12:28:32.493745+00:00 EUVD-2026-187662 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34047 fkie_cve-2023-34047 2026-10-03T12:28:32.493760+00:00

A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.

 https://cve.radiocsirt.org/vuln/ghsa-frqc-f2h8-fjvf GHSA-frqc-f2h8-fjvf — Spring for GraphQL may be exposed to GraphQL context with values from a different session 2026-10-03T12:28:32.493790+00:00

Affected: Maven: org.springframework.graphql:spring-graphql

A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.

 https://cve.radiocsirt.org/vuln/gsd-2023-34047 gsd-2023-34047 2026-10-03T12:28:32.493816+00:00 gsd-2023-34047