ST
Vendor
Strawberry
6
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47707 | SG Strawberry Graphql Strawberry | 5.3 | Jun 4 | Strawberry GraphQL's Bypass of MaxAliasesLimiter via Fragment Spreads leading to GraphQL Alias Amplification |
| CVE-2026-45739 | SG Strawberry Graphql Strawberry | 4.3 | Jun 4 | Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs |
| CVE-2026-47706 | SG Strawberry Graphql Strawberry | 5.3 | Jun 4 | Strawberry GraphQL has a Circular Fragment Reference DOS |
| CVE-2026-35523 | SG Strawberry Graphql Strawberry | 7.5 | Apr 7 | Authentication bypass in strawberry-graphql via legacy graphql-ws WebSocket subprotocol |
| CVE-2026-35526 | SG Strawberry Graphql Strawberry | 7.5 | Apr 7 | Strawberry GraphQL affected by a Denial of Service via unbounded WebSocket subscriptions |
| CVE-2009-1774 | ST Strawberry Strawberry | – | May 22 | Directory traversal vulnerability in plugins/ddb/foot.php in Strawberry 1.1.1 allows remote attackers to include and execute arbitrary local files via a |