ST
Product
strawberry
by strawberry-graphql · last CVE Oct 8, 2026
8
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 3Medium 3Low 2
Watch

Add strawberry to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-47707
5.3
0%
Jun 4
Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification
Affected: >= 0.172.0, < 0.315.7
CVE-2026-47706
5.3
0%
Jun 4
Strawberry GraphQL has a Circular Fragment Reference DOS
Affected: >= 0.71.0, < 0.315.7
CVE-2026-45739
4.3
0%
Jun 4
Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs
Affected: >= 0.288.4, < 0.315.4
Showing 3