| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-06-10 | 2.4 kB | |
| v2.0.4 source code.tar.gz | 2026-06-10 | 486.2 kB | |
| v2.0.4 source code.zip | 2026-06-10 | 1.1 MB | |
| Totals: 3 Items | 1.6 MB | 2 | |
:warning: Security fixes
This release fixes 3 "High" CVEs:
- CVE-2026-41699: Unsafe Deserialization in Spring GraphQL
- CVE-2026-41700: Cross-Site WebSocket Hijacking in Spring for GraphQL
- CVE-2026-41856: Spring GraphQL Annotation Detection Vulnerability
:star: New Features
- Provide more flexibility in JsonKeysetCursorStrategy collections types #1445
:lady_beetle: Bug Fixes
- Argument annotations are ignored on handler methods in generic interfaces #1469
- configureBinder method is unusable #1468
- Allow custom Origins when upgrading to WebSocket transport #1452
- Observations not closed when DataLoader returns null values #1448
- WebSocket keepalive PING not emitted for all idle concurrent sessions #1447
- Missing
@Nullableon type parameter of GraphQlTester.Request#variables(Map<string, object>) #1435 - JSON syntax error in graphiql XSRF header support #1434
- Memory leak in WebFlux WebSocket support when client disconnects #1293