Skip to content
OpenAdvisories

Vendor

strawberry-graphql

9 known vulnerabilities.

Products

strawberry 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-107727

    Strawberry legacy graphql-ws retains naturally completed subscription slots

    Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphql_ws/handlers.py does not remove naturally completed operations from self.tasks and s…

    strawberry-graphql strawberry strawberry-graphql PyPI
  • Low 3.1
    CVE-2026-45739

    Strawberry GraphQL: Default GraphiQL may expose HTTP headers in URLs

    Strawberry GraphQL is a library for creating GraphQL APIs. In versions 0.288.4 through 0.315.3, Strawberry's bundled GraphiQL template wrote values from the GraphiQL headers editor into the browser URL query string. If a user entered a sensitive header, such …

    strawberry-graphql strawberry strawberry-graphql PyPI
  • Low 3.7
    CVE-2025-22151

    Strawberry GraphQL has a type resolution vulnerability

    Strawberry GraphQL is a library for creating GraphQL APIs. Starting in 0.182.0 and prior to version 0.257.0, a type confusion vulnerability exists in Strawberry GraphQL's relay integration that affects multiple ORM integrations (Django, SQLAlchemy, Pydantic).…

    strawberry-graphql strawberry strawberry-graphql PyPI