[ Vendor · 2 CVEs ]
strawberry-graphql
CVEs affecting strawberry-graphql published in the last 30 days, plus any strawberry-graphql CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107727 | 8 Oct 2026 | CVSS 3.7 | Strawberry legacy graphql-ws retains naturally completed subscription slotsStrawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in… | Fix |
| CVE-2026-107728 | 8 Oct 2026 | CVSS 7.5 | Strawberry GraphQL: Synchronous permission checks can treat an awaitable authorization result as truthyStrawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on a synchronous field resolver… | Fix |