SG
Product
Strawberry Graphql
by Strawberry · last CVE Jun 4, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch

Add Strawberry Graphql to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-35523
7.5
0%
Apr 7
Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol
Affected: before 0.312.3
CVE-2026-35526
7.5
0%
Apr 7
Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions
Affected: before 0.312.3
Showing 2