Skip to content
Strawberry vulnerabilities
Newest
-
strawberry graphql, strawberry-graphql strawberry +1 more
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
CVE-2026-47707
Fix available
5.3 Medium
-
strawberry graphql, strawberry-graphql strawberry +1 more
Strawberry GraphQL has a Circular Fragment Reference DOS
CVE-2026-47706
Fix available
5.3 Medium
-
strawberry graphql, strawberry-graphql strawberry +1 more
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
CVE-2026-45739
Fix available
3.1 Low
-
strawberry graphql, strawberry-graphql strawberry +1 more
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
CVE-2026-35526
Fix available
7.5 High
-
strawberry graphql, strawberry-graphql strawberry +1 more
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
CVE-2026-35523
Fix available
7.5 High
-
strawberry
Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote...
CVE-2009-1774
Public exploit
EPSS 23.4%
9.3 High