Skip to contentStrawberry Graphql vulnerabilities
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias AmplificationCVE-2026-47707Fix available5.3 Medium
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL has a Circular Fragment Reference DOSCVE-2026-47706Fix available5.3 Medium
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL: Default GraphiQL may expose HTTP headers in URLsCVE-2026-45739Fix available3.1 Low
- strawberry graphql, strawberry-graphql strawberry +1 moreStrawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptionsCVE-2026-35526Fix available7.5 High
- strawberry graphql, strawberry-graphql strawberry +1 moreAuthentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocolCVE-2026-35523Fix available7.5 High