strawberry-graphql vulnerabilities
9 published CVEs name strawberry-graphql among the affected products.
- 9Published CVEs9 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-107728
Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy
strawberry-graphql · strawberry
High7.5 - CVE-2026-107727
Strawberry legacy graphql-ws retains naturally completed subscription slots
strawberry-graphql · strawberry
Low3.7 - CVE-2026-47707
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
strawberry-graphql · strawberry
Medium5.3 - CVE-2026-45739
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
strawberry-graphql · strawberry
Low3.1 - CVE-2026-47706
Strawberry GraphQL has a Circular Fragment Reference DOS
strawberry-graphql · strawberry
Medium5.3 - CVE-2026-35523
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
strawberry-graphql · strawberry
High7.5 - CVE-2026-35526
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
strawberry-graphql · strawberry
High7.5 - CVE-2025-22151
Strawberry GraphQL has a type resolution vulnerability
strawberry-graphql · strawberry
Low3.7 - CVE-2024-47082
Strawberry GraphQL Cross-Site Request Forgery (CSRF) vulnerability
strawberry-graphql · strawberry
Medium4.6