https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:43:43 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0759 certfr-2026-avi-0759 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0759 https://cve.radiocsirt.org/vuln/euvd-2026-331452 EUVD-2026-331452 https://cve.radiocsirt.org/vuln/euvd-2026-331452 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41700 <p>Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim&#39;s credentials.</p> <p>Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.</p> <p>Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim&#39;s credentials.</p> <p>Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41700 https://cve.radiocsirt.org/vuln/ghsa-m39w-hqxx-3r48 <p><strong>Affected:</strong> Maven: org.springframework.graphql:spring-graphql</p> <p>Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim&#39;s credentials.</p> <p>Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.</p> <p><strong>Affected:</strong> Maven: org.springframework.graphql:spring-graphql</p> <p>Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket Hijacking. An attacker can trick an authenticated user into visiting a malicious page, allowing the attacker to execute arbitrary GraphQL operations with the victim&#39;s credentials.</p> <p>Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.</p> https://cve.radiocsirt.org/vuln/ghsa-m39w-hqxx-3r48