Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:00:06 +0000 certfr-2023-avi-0763 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> les produits </span>Spring. Elles permettent… https://cve.radiocsirt.org/vuln/certfr-2023-avi-0763 certfr-2023-avi-0763 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0763 EUVD-2026-187662 https://cve.radiocsirt.org/vuln/euvd-2026-187662 EUVD-2026-187662 https://cve.radiocsirt.org/vuln/euvd-2026-187662 fkie_cve-2023-34047 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34047 <p>A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.</p> <p>A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34047 GHSA-frqc-f2h8-fjvf — Spring for GraphQL may be exposed to GraphQL context with values from a different session https://cve.radiocsirt.org/vuln/ghsa-frqc-f2h8-fjvf <p><strong>Affected:</strong> Maven: org.springframework.graphql:spring-graphql</p> <p>A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.</p> <p><strong>Affected:</strong> Maven: org.springframework.graphql:spring-graphql</p> <p>A batch loader function in Spring for GraphQL versions 1.1.0 - 1.1.5 and 1.2.0 - 1.2.2 may be exposed to GraphQL context with values, including security context values, from a different session. An application is vulnerable if it provides a DataLoaderOptions instance when registering batch loader functions through DefaultBatchLoaderRegistry.</p> https://cve.radiocsirt.org/vuln/ghsa-frqc-f2h8-fjvf gsd-2023-34047 https://cve.radiocsirt.org/vuln/gsd-2023-34047 gsd-2023-34047 https://cve.radiocsirt.org/vuln/gsd-2023-34047