| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-06-10 | 2.1 kB | |
| v1.4.6 source code.tar.gz | 2026-06-10 | 452.6 kB | |
| v1.4.6 source code.zip | 2026-06-10 | 1.0 MB | |
| Totals: 3 Items | 1.5 MB | 2 | |
:warning: Security fixes
This release fixes 3 "High" CVEs:
- CVE-2026-41699: Unsafe Deserialization in Spring GraphQL
- CVE-2026-41700: Cross-Site WebSocket Hijacking in Spring for GraphQL
- CVE-2026-41856: Spring GraphQL Annotation Detection Vulnerability
:star: New Features
- Provide more flexibility in JsonKeysetCursorStrategy collections types #1446
- Add singleElement() to GraphQlTester.EntityList #1381
:lady_beetle: Bug Fixes
- WebSocket keepalive PING not emitted for all idle concurrent sessions #1474
- Memory leak in WebFlux WebSocket support when client disconnects #1473
- Observations not closed when DataLoader returns null values #1472
- Argument annotations are ignored on handler methods in generic interfaces #1470
- Allow custom Origins when upgrading to WebSocket transport #1465