strawberry-graphql vulnerabilities (PyPI)
9 vulnerabilities.
-
strawberry-graphqlPyPI Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy 7.5 High -
strawberry-graphqlPyPI Strawberry legacy graphql-ws retains naturally completed subscription slots 3.7 Low -
strawberry-graphqlPyPI Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification 5.3 Medium -
strawberry-graphqlPyPI Strawberry GraphQL has a Circular Fragment Reference DOS 5.3 Medium -
strawberry-graphqlPyPI Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs 3.1 Low -
strawberry-graphqlPyPI Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions 7.5 High -
strawberry-graphqlPyPI Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol 7.5 High -
strawberry-graphqlPyPI Strawberry GraphQL has a type resolution vulnerability 3.7 Low -
strawberry-graphqlPyPI Strawberry GraphQL Cross-Site Request Forgery (CSRF) vulnerability 4.6 Medium