Security
فارسی
All products

strawberry-graphql

PyPI · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Strawberry legacy graphql-ws retains naturally completed subscription slotsCVE-2026-107727 · GHSA-M952-2W3F-6R8HVersion ranges need review. strawberry-graphqlExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Low Fix reported
Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthyCVE-2026-107728 · GHSA-PFVF-FWFP-25MPVersion ranges need review. strawberry-graphqlExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsCVE-2026-45739 · GHSA-X97M-QP5C-W9XJVersion ranges need review. strawberry-graphql PyPI Low Fix reported
Strawberry GraphQL has a Circular Fragment Reference DOSCVE-2026-47706 · GHSA-QFWV-87QJ-98XQVersion ranges need review. strawberry-graphql PyPI Medium Fix reported
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias AmplificationCVE-2026-47707 · GHSA-FR49-MHGJ-CRFCVersion ranges need review. strawberry-graphql PyPI Medium Fix reported
Strawberry GraphQL has type resolution vulnerability in node interface that allows potential data leakage through incorrect type resolutionCVE-2025-22151 · GHSA-5XH2-23CC-5JC6Version ranges need review. strawberry-graphql PyPI Low Fix reported
strawberry-graphql: Authentication bypass via legacy graphql-ws WebSocket subprotocolCVE-2026-35523 · GHSA-VPWC-V33Q-MQ89Version ranges need review. strawberry-graphql PyPI High Fix reported
strawberry-graphql: Denial of Service via unbounded WebSocket subscriptionsCVE-2026-35526 · GHSA-HV3W-M4G2-5X77Version ranges need review. strawberry-graphql PyPI High Fix reported
Cross-Site Request Forgery (CSRF) in strawberry-graphqlCVE-2024-47082 · GHSA-79GP-Q4WV-33FRVersion ranges need review. strawberry-graphql PyPI Medium Fix reported