GHSA-phxq-526m-79px
Spring for GraphQL: Annotation Detection Vulnerability
빠른 조치
GHSA-phxq-526m-79px — org.springframework.graphql:spring-graphql: 아래 명령으로 수정 버전으로 올리세요.
# pom.xml: bump <version>2.0.4</version> for org.springframework.graphql:spring-graphql상세
The Spring GraphQL annotation detection mechanism for @Controller data fetchers may not correctly resolve annotations on methods within type hierarchies. This can be an issue if such annotations are used for authorization decisions. When all conditions are met, security annotations can be ignored at runtime.
Affected versions: Spring for GraphQL 2.0.0 through 2.0.3; 1.4.0 through 1.4.5; 1.3.0 through 1.3.8; 1.0.0 through 1.0.6.
이 버전이 영향받나요?
사용 중인 패키지 버전을 입력하면 즉시 평가합니다.
영향 패키지
2.0.0 수정 버전: 2.0.4 # pom.xml: bump <version>2.0.4</version> for org.springframework.graphql:spring-graphql 1.4.0 수정 버전: 1.4.6 # pom.xml: bump <version>1.4.6</version> for org.springframework.graphql:spring-graphql 1.3.0 No fixed version published yet for org.springframework.graphql:spring-graphql (maven). Pin to a known-safe version or switch to an alternative.
1.0.0 No fixed version published yet for org.springframework.graphql:spring-graphql (maven). Pin to a known-safe version or switch to an alternative.