ST
Product
strawberry
8
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 3Low 2
Watch
Add strawberry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107728 | 7.5 | Oct 8 | Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthy Affected: >= 0.217.0, < 0.326.1 |
| CVE-2026-35523 | 7.5 | Apr 7 | Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol Affected: < 0.312.3 |
| CVE-2026-35526 | 7.5 | Apr 7 | Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions Affected: < 0.312.3 |
Showing 3