Login Request a demo
SG
Product
Strawberry Graphql
by Strawberry · last CVE Jun 4, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 0
Severity
All severities5Critical0High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Strawberry Graphql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35523
7.5
0%
Apr 7
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
Affected: before 0.312.3
CVE-2026-35526
7.5
0%
Apr 7
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
Affected: before 0.312.3
CVE-2026-47707
5.3
0%
Jun 4
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
Affected: 0.172.0 before 0.315.7
CVE-2026-47706
5.3
0%
Jun 4
Strawberry GraphQL has a Circular Fragment Reference DOS
Affected: 0.71.0 before 0.315.7
CVE-2026-45739
4.3
0%
Jun 4
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
Affected: 0.288.4 before 0.315.4
Showing 5