Package Health

org.springframework.graphql:spring-graphql

GraphQL Support for Spring Applications

Latest 2.0.4MavenMaven

98%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

98

Dependencies
Dependencies
Evaluates the health and security of package dependencies

89

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Are you affected? Scan for Free

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-639746
spring-graphql is vulnerable to Missing Origin Validation in WebSockets in versions 2.0.0 - 2.0.3, 1.4.0 - 1.4.5, 1.1.0 - 1.3.8 and 0.0.1 - 1.0.6.
0.0.1 - 1.0.61.1.0 - 1.3.81.4.0 - 1.4.5 +1 more
High
AIKIDO-2026-307654
spring-graphql is vulnerable to Incorrect Authorization in versions 2.0.0 - 2.0.3, 1.4.0 - 1.4.5, 1.1.0 - 1.3.8 and 0.0.1 - 1.0.6.
0.0.1 - 1.0.61.1.0 - 1.3.81.4.0 - 1.4.5 +1 more
High
AIKIDO-2026-236725
spring-graphql is vulnerable to Deserialization of Untrusted Data in versions 2.0.0 - 2.0.3, 1.4.0 - 1.4.5 and 0.0.1 - 1.3.8.
0.0.1 - 1.3.81.4.0 - 1.4.52.0.0 - 2.0.3
High
CVE-2023-34047
org.springframework.graphql:spring-graphql is vulnerable to Security Vulnerability in versions 1.1.0 - 1.1.6 and 1.2.0 - 1.2.3.
1.1.0 - 1.1.61.2.0 - 1.2.3
Low

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

DependencyLast ReleaseScore
com.graphql-java:graphql-java
Version 25.0
io.projectreactor:reactor-core
Version 3.8.6
org.springframework:spring-context
Version 7.0.8
io.micrometer:context-propagation
Version 1.2.1

Weekly Downloads

Info

Last Published
1 month ago
Created
4 years ago